8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 03:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04.exe
Size 26KB
Sample260924-dkd8rsce94
SHA256 8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04
MD5 029e214479c80e8aebc59b1b16f716d6
SHA1 72d4aa95cc6efaa536df0d1421daa99f0cbc5d9a
SHA512 e4c72caeb2949d595f8343001874622cae407eee6eecb1ef662b4592a0d7049cee4d4f5fd52002de3cdf3a34bdd0c36038891845bc5f8953037f40ca72be1b0f
SSDEEP 384:r1ayy3+n30AIbHwTA1xMrZZQKAO3X3ZcNDvbtD2KnpLcnatFXEWhgE4bO8loEV2:r15ITwOOZ13elvBKKnzhAbO8hV
TLSH
T103C23B65BAC0C472D521CAF84C15D2A4FA7772322D3918C3B6EF1FCC9E7A7C29928456
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_8e295714cda89d0324200d062dd7833d40f8a44a6ff52a7abfe5d7f76c7d3f04.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:960

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-2-0x0000000000400000-0x000000000040F000-memory.dmp

Download

memory/960-10-0x0000000000400000-0x000000000040F000-memory.dmp

Download

memory/960-17-0x0000000000400000-0x000000000040F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads