5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 22:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3.exe
Size 4.3MB
Sample260924-19tfbatclc
SHA256 5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3
MD5 14b25f46c0810f71ca38cf08dbd40f15
SHA1 70aee0fa4af36940626f946e0b0f82c78f5c5745
SHA512 5fc59a0fc5c5971addf00bce623d080b61d3af149a8a4e89e89f2aa447ee532539b286fe44cdba0f0a68c72f06b68264863653e26c34b4257a5aee04c52a3c8e
SSDEEP 98304:CIvUsQhXgB80qu40Kg4Qo4awS8x9DzI+XSaAysss3jSxWiIcBDPhMeWAO:CIv0XgBfq3g46W09nI+iaXISxWKFIAO
TLSH
T1DB263348E2D15A87FCB99137A4E0CA78E222ED9C97C3974B92DC58D7182337961342DF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
252	5796	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5035c5b45ffc6a0f3b121c7222574b19a4cfd65ca506ba97c4ebbed4044ea7b3.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5796
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5796 -s 364
  2⤵
  - Program crash
  PID:252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5796 -ip 5796
1⤵
PID:1416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads