eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/09/2026, 02:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec.exe
Size 236KB
Sample260924-cqa8maca25
SHA256 eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec
MD5 c1b8b77f67b7f3b908602e01ff7d0299
SHA1 3281e25b2df1e07776cf8972e2a166ccef5a98ff
SHA512 92c36e574b3280a93567372ccdac069a82e51b2697b59e28c31f6ff264962ef397f5e2722da0158c51566fae8f549971dc0bb70006bc27a434375230e2e2068f
SSDEEP 6144:AnLaDstcz7JqrH0eCiOYgCVaag+Ebm+F+hmTBal:8CGZVaDr7F+hmT
TLSH
T17A346B01AA9581B2E72C113A4CD4637F9D2C509C0439E79BD75CFF29B9228663D3A27F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_eb48b6f9d3d02557067bfaf448ab041209e975f2825d5bf0ed759ee7cc3e80ec.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4828-0-0x0000000000400000-0x000000000043F000-memory.dmp

Download