4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 08:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.dll
Size 98KB
Sample260922-kbshcssapc
SHA256 4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0
MD5 965adbd72caaf7f4084e46fb3701a984
SHA1 6dadc55c096a9525af3ea48592c27e72fa7b7dec
SHA512 de11f52ebcc1c17e2006b8c7593179302de62d8c796a09503c70617104e5ec944e02695624b8c5edc42ddcb66330405eb819f5c8bf61cbae9694f62a69c7150f
SSDEEP 1536:vA4gVn1NT1SdYAYmWhx8EzTZqO000ykNnptCT:vA48NTWL+hx3oO000ykN
TLSH
T120A38217B1438DB9CBC2113548A7EFBA0822BDFE07174A76AB58597DFC852F316059E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4984 wrote to memory of 4688	4984	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4984
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4b40bc4afe22fccb9ed2b254cf6a8d8cf5ab863dc49229f48ebd20870805b5b0.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads