4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 05:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe
Size 252KB
Sample260925-fvecmattev
SHA256 4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866
MD5 8fb946e8a9a32f9e21a0e50b8c97b5e0
SHA1 63b3914976fccca4c1cf64dd44df5747791c0a69
SHA512 9f5b9f5b4288c496fef56f1fce0f76045d11a90b4ade8b16d9d2c3f08cc4fe0cfe30e3280f07804e5f26d8c652a24a6aca52bf1cb5e216fc577ec37992a25cae
SSDEEP 6144:3s8ZSfWInb7CRu4EjURcbvdqaKVK6rDHfQ/Fea9nkqCuCMAPPo:3s8ZaclYlbSfHfQ/D9nsuUPPo
TLSH
T11144F11BF78646F3C4808770085D93B7E13CFF05AB64A2D7CB4E9E362C75521B64A86A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4280	jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe
4280	jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4faca9fd32a102b7bf287098609236f31bfdf27a58292b6d1446fd1deaa4b866.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4280

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4280-0-0x0000000000400000-0x000000000041F000-memory.dmp

Download