37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 04:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355.exe
Size 9KB
Sample260924-eqfjfsdf88
SHA256 37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355
MD5 c132e459ee2afb436e456393bb588585
SHA1 4f9755a77a697749e5665cff3140dbacb78451ec
SHA512 a7dfb2ad9166d520f5fc35314b2b4599d2c7670e417342908842f9d29adeae76e446c83d4d892c1a9cd8fd2c25719cb3fd48606cdfb2bf6326967eda8499e490
SSDEEP 192:cC6gloe8Sc1FFNvjCEug1gZjskuf1o/ME5cTj4tSWkE4cWFnQx1uxhu3:Z5L8BFFJjHDOZjskuf1mMEeTjgSWkEK1
TLSH
T11F12DA0D2B6C6DF2FBE3647E14094867FF3278052085ED07EC988A5BA6B6654C05D3AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
756	jaffacakes118_37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_37e9b6e9b72b8038d09f6e7cb62f6e508dcbe9ad84bff42c4fbd84cc89279355.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
PID:756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/756-0-0x0000000000400000-0x0000000000406000-memory.dmp

Download

memory/756-2-0x0000000000400000-0x0000000000406000-memory.dmp