54147c9d8dd2b3795d3f6055d84753b7def08b561d78e7fc977820bd358300c0

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 07:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_54147c9d8dd2b3795d3f6055d84753b7def08b561d78e7fc977820bd358300c0.dll
Size 80KB
Sample261002-hs393svaph
SHA256 54147c9d8dd2b3795d3f6055d84753b7def08b561d78e7fc977820bd358300c0
MD5 805499696ca6d3a7bc424231c5d66bfc
SHA1 e3d684a46e66db8eae04406bac9d592c6ed6c585
SHA512 d4d9c2a93194290d092dc31a3710374b27b1b900ef40807128bb8b0f6dcb25991507f68f8a7d8a643132ef2d082bb47b7e097eeb31627a368e68617a3dde9e29
SSDEEP 1536:RrEzMwFTZ/2AINgpmy7UyxD1OypXbdfdgNX/1UmvY5r0MQwn7H:ezPF9//px7UyxDwW5fdidbuIMQwnj
TLSH
T11B83AFA84B152976D7BFC536989A3E2B4D3621B279476897933221C238731D2DF09F0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1140 wrote to memory of 5744	1140	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_54147c9d8dd2b3795d3f6055d84753b7def08b561d78e7fc977820bd358300c0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1140
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_54147c9d8dd2b3795d3f6055d84753b7def08b561d78e7fc977820bd358300c0.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:5744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads