203306d67bfc4d61ea88b0cb311a6689dea2b70c11ef44d58484164c954d95fc

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/09/2026, 19:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__2b8a891cb257d28d26b89bff6743cb76.exe
Size 20KB
Sample260920-xpcehsys9p
SHA256 203306d67bfc4d61ea88b0cb311a6689dea2b70c11ef44d58484164c954d95fc
MD5 2b8a891cb257d28d26b89bff6743cb76
SHA1 684bf68a6966d019fe49f5e29f1338c27b6e1524
SHA512 62c5e6bbae06e7819b11d145d93bbfcfe50fc6b043c983a1667e56b3c1dbe10dce612eeef6614b32bec6f8d847d99c5d787107913990bc70e2cfae003e882c27
SSDEEP 48:yB/vID+afMl+2gtx8jhqTCjEqfsbCPdRmlczT2LzwiavqKzSxROgNs7Ds29ETh/5:O/U2eujhl3eCWc3wzpxUJ7DsmW6ag2
TLSH
T19D927313FE9C9872F24A47731E3387E80526FC301A159E1B3D8ABF1D1C74A426DA661B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__2b8a891cb257d28d26b89bff6743cb76.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4056	jaffacakes118__2b8a891cb257d28d26b89bff6743cb76.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2b8a891cb257d28d26b89bff6743cb76.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2b8a891cb257d28d26b89bff6743cb76.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads