6098253ca96596b2f54923ec1a1983128a058345a729225353d8f20c8afdf309

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 21:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6098253ca96596b2f54923ec1a1983128a058345a729225353d8f20c8afdf309.dll
Size 79KB
Sample260924-1p8phashmd
SHA256 6098253ca96596b2f54923ec1a1983128a058345a729225353d8f20c8afdf309
MD5 fb7edc1bb982d2f65d65af2776950183
SHA1 beb5493c9bc81260d69abe1d29a00b4d88cb8787
SHA512 99df40dbbd1fb62770129677b0b9eb545f4c1afe62734a25d2e3a45e00b30c75d5a0a5409d07395db59d1cefe0ecba10c88671e434ea917d89fe25c28138efa6
SSDEEP 1536:lksmsapPV5krWDT4Qmi1JHz1Cpk3K3XbJ+68t+2f6BrkapOXybh19Z:msmsaprkiDT4SJHRCy4LJ+68Rf6BrzUm
TLSH
T1B283A0E9452A7579E32FCD37C8D73E3ACA1523F27C42A49B832215D525721A2EB09D0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4816 wrote to memory of 1356	4816	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6098253ca96596b2f54923ec1a1983128a058345a729225353d8f20c8afdf309.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4816
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6098253ca96596b2f54923ec1a1983128a058345a729225353d8f20c8afdf309.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads