61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 03:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa.exe
Size 22KB
Sample260924-ehd1nade49
SHA256 61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa
MD5 079a179b11b82aa309bf983167b034c3
SHA1 6eb6ecd1e1ef7037c61d253a8f1e6bd2badbdba1
SHA512 59ae0dfbf18bd2d743eecff22cbc7a9d9d9a3ee917cdd546182ff4991ed69f1918cf23eb9e5a4aaa274208d1540753865f999a5df09b51232ccd84f8512aa7ed
SSDEEP 384:viNTykwryGWRwte7x/+1QInRAsSLW4OoXTIE+eWSZOIe8AgcQ4lP:KxGW5BIngLWdoXTI9LSQsDc
TLSH
T15FA2213D6A41E073D41701F17885A5C3679A6FB5783E4C076A491F8A2839E4B9AFC723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4464	jaffacakes118_61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_61e2f9f2bb68e037c615a7f5952c9354427533fb5c95f54f19b30bfc6fb57bfa.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
PID:4464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4464-0-0x0000000000400000-0x0000000000408000-memory.dmp

Download

memory/4464-1-0x0000000000401000-0x0000000000402000-memory.dmp

Download

memory/4464-2-0x0000000000400000-0x0000000000408000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads