523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 12:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f.exe
Size 893KB
Sample260930-pc4n8stv2k
SHA256 523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f
MD5 d426d596fa68667122445e7d7c5d0e86
SHA1 af7e7e4e2b5101faeb7a97c255285122890139fc
SHA512 ca166e49702b9817ed12e057bbcf7e76fd8da92b36e763f592f8ca240458b895846e40b38c502f765dcc2457f328990968367e6bd5961b7ac4b761f1a051d3a1
SSDEEP 24576:CcU28vzc4Ot1hIs4InymOTvDsn6mEFGXejjTWo:gXe6m6/Tx
TLSH
T1BC154B2EB98984B7C03274F5166D4DB1686EBC31A77A19C763F0363C1639583CD21AEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
6000	4104	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_523454db004c7908e3720cd1b649021cc01fc55a0cd1a52ee2a4d38da939b56f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4104
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 600
  2⤵
  - Program crash
  PID:6000

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4104 -ip 4104
1⤵
PID:5480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4104-0-0x0000000000190000-0x0000000000275000-memory.dmp

Download