b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 10:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff.exe
Size 145KB
Sample260924-l2gdfstsay
SHA256 b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff
MD5 d23c28bbc32311338458946743a5ae8b
SHA1 75a0e0c4a0382bff064d875e3ac04a514d35de74
SHA512 40764ae3b73b09db6e0b3b7cfadeb7c74238875cd74819933dd763f225f6ac56abc4bbe2e148392b86ee7d0b42d18f320caf13dd83eafc6875bf9fde8b27ecfc
SSDEEP 3072:+3Btg/j2zuDw4r2FSyFPDXGf0vKflVGbYOzycijMNe7BE4k:+RO/pT2FrFPDX7gfG8aycwMY7+
TLSH
T103E3DF16D659FE94D4893EF6F1D93471120F2C511A32F56231B2B818ABBD1E3DE8823E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5968	4076	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b4cd9469ffb69816218964663b35b40c55ac641811b34076a10a7bfa025cf4ff.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4076
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4076 -s 360
  2⤵
  - Program crash
  PID:5968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4076 -ip 4076
1⤵
PID:4520

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4076-0-0x0000000000400000-0x0000000000439000-memory.dmp

Download

memory/4076-1-0x00000000008D0000-0x00000000008D9000-memory.dmp