7da6fdc90f06f16558e9237fbff781840e86b319b722d7657dc6cfb5f52eae90

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Trojan-Dropper.Win32.Demp.rgf.exe
Size 40KB
Sample261009-w22phade33
SHA256 7da6fdc90f06f16558e9237fbff781840e86b319b722d7657dc6cfb5f52eae90
MD5 ede2aed51cbc8b6e8eeaa71e6c8d569b
SHA1 119a9fd9eb00f917f0d7b25ffc9065ba91bf9dbb
SHA512 9a70c6ca935a665e21946f23bcfd8154a865e622b0b218620e8c9b124ab07f123ff82e0b6eaf748ce21391a0223fb550518fc8020048e91ac3aec2c4c4545e60
SSDEEP 768:npfFRvmzROAYLZWcBT5c0HnTDKbI6J+S+j4wHlAsFHLMPcLTxuOHYu207RQ3pMcI:FFVNnTDd6kS+j4wHlDr6ckOHH2v5McNS
TLSH
T186135323D510A8A1E12912B627B7072CE970CFB129B14617EFC47DF46EB6732AE4790C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_Trojan-Dropper.Win32.Demp.rgf.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.Demp.rgf.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.Demp.rgf.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3816-0-0x0000000000400000-0x000000000040D000-memory.dmp

Download

memory/3816-1-0x0000000000400000-0x000000000040D000-memory.dmp