fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 09:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe
Size 561KB
Sample260924-lwebxaag59
SHA256 fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd
MD5 cf93d2fd9dd2cd8425b8bb405b75ba55
SHA1 12fee4903a391d663315a622eef8c6beb13fbda0
SHA512 c383e71cfee777c5d1660ed911e0459d5982b6f3c3859063c013e65bc22a4cdfc0b3b62f503e1fc8e256366ba32a35692d2f28ecfab87e23f283dce609751bdd
SSDEEP 6144:2dCYv437h7emV3PyYCJjXyX87FR0XNPROiIWRE3ENmGbkWXhppJ:WNaOjXG87sXNPoReVdfZJ
TLSH
T122C40834F281EC70E16302711A65F2B9516BAF005B21918F7EAD3A1D2AF738165FEE1D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5980	jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe
5980	jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_fbe626a58f4594d14213b7feb07a0e557c230b0c2b03cc1b2204d0b64ecb50bd.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5980

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5980-0-0x0000000000400000-0x0000000000490000-memory.dmp

Download