cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 03:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da.exe
Size 29KB
Sample260924-d3vcpsdb27
SHA256 cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da
MD5 c45653a33e6347bfac15411a18e4901c
SHA1 a3c9df09ae4c1061bd0b01995ff070c9d6160b21
SHA512 fb8541fc260da3d7505eb9de5144f25bef1358de6d3c9c99139849dde094663eac880cfe477b1543587f1cef6448e9cd2071ae593af973d4f6fe9c153659b347
SSDEEP 384:+JOqrThIuTVmxdWdE6fAoMlZNp5jHK/0TwDW5rNPYmcYj4ZNDyFP15c:+FTaT6ObzNpdHK/4wDuYG4ZNGB1
TLSH
T149D2E96C7A7C4CB4F1212935E3BAA14D9F2D7E6A049ADE2F5E0051645E1FC0BC8F4369
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4152	jaffacakes118_cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cbea6a0ecaa8aa15a10f45cd5f003931a02a7d00b6616057a02c936c1cd076da.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
PID:4152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

t1.tmp

Path C:\Users\Admin\AppData\Local\Temp\t1.tmp
Size 94B
SHA256 a5388a84d0a0fd2680581f672ad42a5994d52bbacb885fb591fc6d4ba02b9cfd
MD5 b2c010dadb25e83b6f6f1aaa1f70fec0
SHA1 114ffc31485ca9d1fbc4d1bc0cc064df5bf33dce
SHA512 0c33dbe23f67aaaad7cbf2134853045b88bb287a94df615402ed571ff387a87ac202d10bd12d56ceb96b76336dfa6ca54bf92a28aa9c19974a628a88853ff85b
TLSH
T19EB0120531240B57C30E99055817D4621012397A2049DE14035107BA112810FC2475CB
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4152-0-0x0000000000400000-0x0000000000409000-memory.dmp

Download

memory/4152-8-0x0000000000400000-0x0000000000409000-memory.dmp