ab6ecfc9b883a5edc7d753b743a4303a6557edb1e278fa53ece11cc8a11c34a8

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ab6ecfc9b883a5edc7d753b743a4303a6557edb1e278fa53ece11cc8a11c34a8.dll
Size 21KB
Sample260925-wtwhhsge28
SHA256 ab6ecfc9b883a5edc7d753b743a4303a6557edb1e278fa53ece11cc8a11c34a8
MD5 e3b19c4f34dee473f33dc3cd01a22e63
SHA1 6b93854c02ba4e39ea1df282a6abaae110fc5d31
SHA512 bf618c1def71b77c5c5b0667bca66c37481796c0bac0b5bbd1d6bdd74cb411c471ca203e4ab1dd32d3955a809ad0bfdcd46f145dba4212ca052d10ad6767ba41
SSDEEP 384:LgN67tnyeSqHBArU75RXOl32JCyYgFzY3BsZEmHZd:y2hBD97UyYghYRsj5
TLSH
T12FA21A532E8F2DF1CD28867430E72B7A846C6D64069968971BD3EC69943F1633A3D783
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4656 wrote to memory of 3780	4656	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ab6ecfc9b883a5edc7d753b743a4303a6557edb1e278fa53ece11cc8a11c34a8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4656
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ab6ecfc9b883a5edc7d753b743a4303a6557edb1e278fa53ece11cc8a11c34a8.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads