cde723266caa752baff488d73807137d4512b87607d6de1fc566f6b6469cfa4c

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 07:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_cde723266caa752baff488d73807137d4512b87607d6de1fc566f6b6469cfa4c.dll
Size 72KB
Sample261002-hvs7wsbg52
SHA256 cde723266caa752baff488d73807137d4512b87607d6de1fc566f6b6469cfa4c
MD5 47680397a7ee7c997ee109c123e78bd7
SHA1 d24642811716e46a5555133563fe26b5cf3a3f2b
SHA512 1cc574ad20922476c079af4db00ba2c22323f4cd16368b9ffc73185426ca1a48aebab49907f012bc41f78181126415b14963f4c194f88a3e68a6854b1dfc2c7e
SSDEEP 1536:r7yUt/+XHsmcRR7ydRqM+3XEglIn0BKQPuYmbm4f0PdKV3:PtbfRR7Q0M+3XnIntQPfo2PdKV3
TLSH
T13973AF6C9615297AE72F893755A73E2A4D2823B27987505F872220C538761E2FF09E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 4976	4120	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cde723266caa752baff488d73807137d4512b87607d6de1fc566f6b6469cfa4c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_cde723266caa752baff488d73807137d4512b87607d6de1fc566f6b6469cfa4c.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4976

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads