66e00347fe5508b2e400ac5eda8b33695d40af986912763561e2f9b5fe0d0e9d

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_66e00347fe5508b2e400ac5eda8b33695d40af986912763561e2f9b5fe0d0e9d.dll
Size 19KB
Sample260925-3tenbsssbs
SHA256 66e00347fe5508b2e400ac5eda8b33695d40af986912763561e2f9b5fe0d0e9d
MD5 b6d810b2135085f71b49920d2672d51f
SHA1 f12bfb20b9e027aeed9752b6afc2f15b6fd90273
SHA512 d904502fd558bf5d47ca1a0a8ac5d194850c0e16522a66a122fce4466258974c8fa3cbe9257c1a86fb73044135a78837a286d44e0adf59585a43138a67afa4af
SSDEEP 384:LM0O2hChUhW6cS6I5/+TUoiZDun+tF13vGa:w0TCrs5/+4xZyng7F
TLSH
T197923C937351C9D2C2AD6A307D493F3FBA7F8170B5B4D883572B1E402A630516A9278B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 236 wrote to memory of 2760	236	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_66e00347fe5508b2e400ac5eda8b33695d40af986912763561e2f9b5fe0d0e9d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:236
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_66e00347fe5508b2e400ac5eda8b33695d40af986912763561e2f9b5fe0d0e9d.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2760

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads