4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 10:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac.exe
Size 158KB
Sample260930-mgxqdace77
SHA256 4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac
MD5 c45b8592933a473f26a6862de804e79b
SHA1 15a012952259915379f6514386071fa7f8d835a1
SHA512 0f59e2f245c88955d584da0c784c6a1ec438364caa52a7e776f585e05933cd3c64112db0710f749348f2f36b965389a304d8c78b7354d3295196d10e7f0bd89d
SSDEEP 3072:yTN6poKNLV1lK5wtbnv0Xz1Raag25Q8qPrwc7o1C8nbrenu21zAtJ6u:5poa95GqagIc0gsCuYc76u
TLSH
T13DF3D38611E60D4FE65733FFADA30C0D4943FA51C85D624E6943E34D6887AFB4B6CA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_4572350e480c525b1c483beac013970ed688620a38ed796ee675c9d0ba47baac.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5180-0-0x0000000000400000-0x0000000000440000-memory.dmp

Download