865e677f95ee0a7a13d22481f706c89ee0c9e48392c2b6ab934d3a50ea7ba8f4

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/10/2026, 22:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Size 361KB
Sample261013-1wlhjstyht
SHA256 865e677f95ee0a7a13d22481f706c89ee0c9e48392c2b6ab934d3a50ea7ba8f4
MD5 08f9cf500980825ed0f9bd32ff5dac2c
SHA1 5cda279330eb7f756d37f09b32cc7241744c5525
SHA512 aad95ea44fc14152ae36417545b5b3fcfeae174205abb85511397c8db35812fcc514ef8dd74f493a422758d1e6ae7fd896ed9234b6480ac6b284c0642c7ab146
SSDEEP 6144:iI833OUlFh70zthNYS4hsrtTvWr5sMvbtfi4wX0C:iB1lsz/6oMr5sIfiR0C
TLSH
T1C3740201E1A14570E1735E7D481FA318EB7E6E127E3892AE77E5245EED2C6E06428BC3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2664	3684	WerFault.exe	88

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_HEUR.Trojan.Win32.Generic.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3684
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3684 -s 480
  2⤵
  - Program crash
  PID:2664

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 3684 -ip 3684
1⤵
PID:3332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3684-0-0x0000000001028000-0x0000000001029000-memory.dmp

Download

memory/3684-1-0x0000000001000000-0x0000000001064000-memory.dmp