3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a

Analysis

max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 05:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a.exe
Size 1.3MB
Sample260925-fr44wazfph
SHA256 3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a
MD5 d41d9d63f9788254d846e1c722acc718
SHA1 febda89882c9d10780578029ccb22366e0162dc7
SHA512 acd9f66941a1412369504ca5df3404a8f432aaf5109599434a9c8774c5f2ead8032b0b7c33a29800b0e2e0ae6d46c7c542e25806d5522b780ffcd7ca87a080cf
SSDEEP 24576:LejDKKiDkY2+AhEcy1BirYZqX1r06Um84QeP3Cqkkkkkkk:LeUDeyLZqlT3C
TLSH
T17E558E11F541C42DE19300F322AA1BFAAB69FF61462519D74354F8ED8BB5C623EB920F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\windows\system32\drivers\etc\hosts	jaffacakes118_3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3821566b65086193d2a8eac4ee4be6a0f485f41f8397af3c7b528fed2d4a672a.exe"
1⤵
- Drops file in Drivers directory
- System Location Discovery: System Language Discovery
PID:4456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

hosts

Path C:\Windows\System32\drivers\etc\hosts
Size 348B
SHA256 bd2694d8623e6033adec98085ea88fac39858020fc877a04a16f93276a25e16e
MD5 2753b3de1678296248a3366df4f4d86e
SHA1 8fa473a8f8c51e1ff07622eeb95b5f57df80fd0a
SHA512 358de432ea63bf119326a385a8d0dccd97921a613c8927117d7062ea6950f19a5d8200601fe3e410da9f2c03f835ba2213b77bbeb31a3d0305636c83a3d9d8a5
TLSH
T153E0B66E36BAEEFA46E5C4000314279A81C99C9429D2E8C84BD0D72A1FA1F48E058255
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4456-0-0x0000000000400000-0x000000000055B000-memory.dmp

Download