8da55f560d35d74772a12c5b17880d3358f33c32e0fee4a869731e0ab04f34e0

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 17:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Net-Worm.Win32.Allaple.e.exe
Size 119KB
Sample261009-vt9vgada97
SHA256 8da55f560d35d74772a12c5b17880d3358f33c32e0fee4a869731e0ab04f34e0
MD5 476af2212696d4522b5f891bc26a28a9
SHA1 256d66a7f3e4edb43f82c443fe486f15899a6238
SHA512 c9e75933f7bea28e30c415aafb5793f8fefbc408d08294cab42010107a86f3780c5df1d242ef63b6565e20eee45960de6b4e8af950c8d010df670b03f4fc9415
SSDEEP 3072:TkOcZ/PfjhjHpXUMVbulFjFm3AgPsEWLfRba:TXc5VdkaylFU3AgPRGVa
TLSH
T136C301CED80BB888E9937AFD17C024EDF3715D40AAF87C1A7DA80DDC51B8120AB4E065
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_Net-Worm.Win32.Allaple.e.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Net-Worm.Win32.Allaple.e.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Net-Worm.Win32.Allaple.e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2636-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/2636-1-0x0000000000400000-0x0000000000435000-memory.dmp