946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 02:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05.exe
Size 236KB
Sample260924-c3fc4scc73
SHA256 946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05
MD5 7dc0ae2a6f93d2b29e03688b011a9c77
SHA1 cb7b09cf7cf85bc99999abaef6958bedcbdb21bb
SHA512 c9838cd14650b6275b932ce1537e924297cbca050763d2a45fbd491500bbc5576aa0961a5f2a9bc09c7962d269c4df3307f47451966cd4e640877e36a2350eb3
SSDEEP 3072:Zmy5lfN28Wk5kUxhPOt1yobk2ZmOPaWqeUwaTBfE5m/fFVrMRmO:VlJkUxd0koINOyWqeZaTBM8/UoO
TLSH
T164345B01AAD581B2DB3921765CD8637F9E2C80AC0138E79BD358FF29B9225453D3927F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_946bcf3cf6ce53b6b12ebe750a674fd4f1f20d726f87de692dca759d52fa4d05.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2800-0-0x0000000000400000-0x000000000043F000-memory.dmp

Download