61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe
Size 1.4MB
Sample260925-182ejayw4k
SHA256 61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5
MD5 72c1688d0047d390ad792760575a12e8
SHA1 1ca4da10c9f620e0815b742ee79b142a90b8be3f
SHA512 a1cd78feb982469c37d0e8152894c15a2342d2eb971a4d12a027a5f196c6dd17389729f02b5d4dcd65b3a1e09848c16db654a4c063dd7b4b6fe22eb2e3d1d5b7
SSDEEP 24576:KyweYAQLUrtZkbtznW0eGJ9XNhgIKYNL:Kys6rgtzLJ1Cu
TLSH
T1B365AE12F5D295F1D60621720BAA2779EE74FA460F20CFC7A7B4DE3C6D322819A37119
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4148	jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe
4148	jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_61c2d0b4e012724c491fdae08eff08922cad4b820b8eb7ea5b59631bb47589b5.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4148-0-0x0000000000400000-0x0000000000573000-memory.dmp

Download