b35e3b1b3ae81632ba993d9a34fed32022b15d3dc849452fd4c24388734f8250

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 11:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_b35e3b1b3ae81632ba993d9a34fed32022b15d3dc849452fd4c24388734f8250.dll
Size 84KB
Sample260930-nl1hhatdne
SHA256 b35e3b1b3ae81632ba993d9a34fed32022b15d3dc849452fd4c24388734f8250
MD5 5eb72b631924e3ede8e599be6a440863
SHA1 556353c5149026e2a04e0a749706f50dd79c6914
SHA512 07b27cd4b3f1162080de501504092d16249d0e13c7f45a8a73e49f27620795f08b4cddb71b264ee8af526cd2e54e16a46343d48c43af862232bee5326c05244a
SSDEEP 1536:60IbT4UipLYu12nhBbgA6U2rxtF3wj6/32nQg1Pweef1LpEIjvsejjpTyl:CbOKhQrHuw2Qg1oewRpDvsejjUl
TLSH
T1DA839E68A3C1D976E36F8132258E7E27083935B359DB509B877202C5697A5C0FE0AF4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3380 wrote to memory of 2168	3380	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b35e3b1b3ae81632ba993d9a34fed32022b15d3dc849452fd4c24388734f8250.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b35e3b1b3ae81632ba993d9a34fed32022b15d3dc849452fd4c24388734f8250.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads