c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045

Analysis

max time kernel
150s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 01:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045.exe
Size 879KB
Sample260924-b4fvlabd85
SHA256 c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045
MD5 e73e60f3881db6f703fdd12dc67e054d
SHA1 6d776a6c8799bf06cd196195b25c8870667530c1
SHA512 99fe5af404be9bb38fc1d58a89c9aae1b0e4a674e6ef5d74ba9d57a121c0f46aabc259ab4baf0f9df76970fe91dfb73bfea2010e725f635693c2b6c9518201c9
SSDEEP 1536:4m6BNrl220FG/FOFoi9jPaWHNXha4hYOyB+20PRIZ8xdRyjj:4xRsz6OyB4Pe2yjj
TLSH
T1F1155B1DE7616513F9F7813386333585FABF3CA1F638CB6A048B4F698330A199856786
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3348	5360	WerFault.exe	86

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_c4fa73afc128b8eaee9f21a119f1655165641621cae45070a96ba05ea0e06045.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5360 -s 240
  2⤵
  - Program crash
  PID:3348

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5360 -ip 5360
1⤵
PID:4724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5360-0-0x0000000000400000-0x00000000004E4000-memory.dmp

Download