6a0ad3e52e375a1239928f3cf01ea60681e8e33f89b965b434b9043afe36c617

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/09/2026, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__2b73d6eb08ae0f0a81703d8debd91c0d.exe
Size 3KB
Sample260920-xmpxtsys6q
SHA256 6a0ad3e52e375a1239928f3cf01ea60681e8e33f89b965b434b9043afe36c617
MD5 2b73d6eb08ae0f0a81703d8debd91c0d
SHA1 f0f6bd8954b5737e6089f870e5542a53e749f36a
SHA512 2a25d61f2d1805187b308634b3cbe1574d2e1e5bbd6fa452e879a650c5880be80721dfb6fd2fcd024c0e701cd85ed00f4321a3b60fed235f2e60035824c37880
TLSH
T19471B55F52EC9C21C79007F6089B4424E8F7E0308783D5163ACEC05937F2144E6A6355
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__2b73d6eb08ae0f0a81703d8debd91c0d.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2b73d6eb08ae0f0a81703d8debd91c0d.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2b73d6eb08ae0f0a81703d8debd91c0d.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads