16c7269aef31ac722c0878e6b0ed8a4da0f620a03a172c9f7d6556ed193b80ef

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__2884b2eb5c6b97b74ccb2eb5d980760e.exe
Size 164KB
Sample260920-2amddser7t
SHA256 16c7269aef31ac722c0878e6b0ed8a4da0f620a03a172c9f7d6556ed193b80ef
MD5 2884b2eb5c6b97b74ccb2eb5d980760e
SHA1 529ed14ce49f711fe1f37aa8f4b9836641d0160c
SHA512 3b11556554e848300a0ec4ebbd1d537a1ec235cdeb1a444125b00d0049cade1faca3d94c58a877905b07a1eb495d3e8104c494c45e0559fc6529aa54df7e0212
SSDEEP 3072:OIBH1/AaRMi0vnjKRcHCjveNH5VW+/1JcWqJWx74ffinCO1eBLwF3YLAOkHEJzYc:Oc1xRarDHW+Elg4HinhMBLwiw0YrEe45
TLSH
T102F37D6DF7A3DC2DD49B20BD907D2642A7EE9B92C59D68B523345C4A3B30D40A1306FE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4968-0-0x0000000001000000-0x0000000001068000-memory.dmp	upx
behavioral2/memory/4968-1-0x0000000001000000-0x0000000001068000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__2884b2eb5c6b97b74ccb2eb5d980760e.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2884b2eb5c6b97b74ccb2eb5d980760e.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2884b2eb5c6b97b74ccb2eb5d980760e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4968-0-0x0000000001000000-0x0000000001068000-memory.dmp

Download

memory/4968-1-0x0000000001000000-0x0000000001068000-memory.dmp