5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 09:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a.exe
Size 123KB
Sample260930-lskdravt8m
SHA256 5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a
MD5 68bcdb6f70bc4034385807fffa0a6986
SHA1 664c6dc908b9f90ff793ac992364c4196496b693
SHA512 7e5d901675918fa370b0f2de166f566767c80f04a6a7390e00b2b8d6880354d4b3a62308ced1262cdc434b84d939d2f7cce6980858a39afac303565e6d299429
SSDEEP 3072:5Rdmw4lAIoW9kx4b5QplRtgTOZT5hNqO:Aw9Wb5qmOZ7Nq
TLSH
T1D6C37A21A53818E5C3ABB2759417D5D5A7284006C7FF2ADB2C132253AB8BCDC4FB1A73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
6104	4588	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_5cfeecc32a6e0f7a579622af4f18e193e1dd09effa3af741d17f574761fdc01a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4588
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 392
  2⤵
  - Program crash
  PID:6104

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4588 -ip 4588
1⤵
PID:2184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads