d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 07:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b.exe
Size 787KB
Sample261002-jsxyqsda49
SHA256 d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b
MD5 9103c5973751ac8694929c6b1cbdbb42
SHA1 265335ffcb855fd0b09997454540d72bbf35db3a
SHA512 491112804e213a190f1bca0d035228af944d43304852558a464daa436ae8b26c99117c9f37728f633b9ca79dce41a9cfe28ccc9d5b8a17ec504257dd8e447da3
SSDEEP 12288:PbDgdqYG15SAguZ88yoSwW3kFKAyieXrsqryNoShBzqPvBoSRNsGTYv7e:jJ15SBTOWUFKCe1rKWP4Rvq
TLSH
T1C805DF51F781C032C88606764862976D8AB57D262FB49ACBE7D43E3FDE303D16E79209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d0ff0c265a7c36532d0edb313d05b6b9f5ee0e845bbcce120e7c0edf3781796b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1260

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1260-0-0x0000000000400000-0x00000000004C9000-memory.dmp

Download