46a7253be44f40ee4240de19c8086fd537b7febfd0a9ef5944ae25fee7eaa377

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 23:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe
Size 304KB
Sample260920-3v8msseb45
SHA256 46a7253be44f40ee4240de19c8086fd537b7febfd0a9ef5944ae25fee7eaa377
MD5 15ca346f95f55c58d28b8ecf77400252
SHA1 92c70ec1828417eca59952660f22e1797d29d083
SHA512 1dfe5a78c34fd6f16df78f8f0c265aabc169fcbf9e623dacd9a23d34484b808f0ea7c06cb45b7c30b8636c2295bb3fab0352cafb82c1293fa5c060e616698a15
SSDEEP 3072:tpk8j+/QTl7vODGvJfNJePeP7LC037BZyirVecAW656SoHUfh7FEge74JvlTVEut:jj+EvWGvnPPCqlseVYW65I16Eu
TLSH
T122645B1273E08875D793537A0996DBA666B5EC344E60924FE3647F2DAE742C3883334E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
932	jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe
932	jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe
932	jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe
932	jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__15ca346f95f55c58d28b8ecf77400252.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:932

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads