ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c

Analysis

max time kernel
150s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 09:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c.exe
Size 4.9MB
Sample261002-k4e3qs1hpg
SHA256 ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c
MD5 12a014dca08b01cc990210e9f5a1d600
SHA1 07327ff5f1c90c8c9a73a034265f4497c4447bbc
SHA512 ff4c8ae41b3e562dceafa7d55f3ee3bfa4a5652a320d766f5c46f0275280222aec5f5f7f6499e747c5d04dec3516ded8366bb2c9f60b8acf01f6a068cd543e1d
SSDEEP 98304:Dju608E5xOFMi8VteOsabMx3o5/HGIL0HZ1u6s0HZ12dV60WLCCvFHi8ve7OsHfg:8EFMVVY3kmRb9Db2DyFHVveryis09wh5
TLSH
T1C936332D22D02903F71A667189A48F72C4F5E24161174B86B7FB34F925F41D6AB3CB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ba56b245b210d36c5130c132620c8d8a7988fb2f327ae71747e1d664ed4f560c.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1272

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1272-0-0x0000000000400000-0x0000000000426000-memory.dmp

Download