6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 08:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1.exe
Size 490KB
Sample261002-kbvmqadh23
SHA256 6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1
MD5 7466e4784fa0bc2024b98434db005ebe
SHA1 57484159c3b3d2520a7ec94e0369d4d32e0e9eba
SHA512 2c1d4f835ba93ae8fc6c2c783fb5636e3ff94c1afe76be98cf676b35b505f2c13c1ace628f57af2c64ecd84090a1b61d01d677b0a550af228c5cf3b17a75a373
SSDEEP 6144:G/lZVDnHGovcdzLCgZnXX5KUlYgjG0eWGxvL/jWqqvcVPrPw3tfi9Pm:8ZVDnHGomLCaZvjzeW2/t5bwCm
TLSH
T1D5B45C62B2B15837D1636E78DC1B86AC9836FE102D3855863BE52D0C9F397C1392B2D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6fd509e66d83def45d86b176e3466622710b374cc61615d81a3ae7b9796cadb1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5908-0-0x0000000000400000-0x0000000000482000-memory.dmp

Download