bd7626ebcedc58da1238be6cc5d8441fe9b2de32623cf6acf54f56e83f19c415

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 00:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Size 392KB
Sample261014-ag3v6sds91
SHA256 bd7626ebcedc58da1238be6cc5d8441fe9b2de32623cf6acf54f56e83f19c415
MD5 24ac723ad0075995e15418ab0f149579
SHA1 83ae4d306c5596f215728f1f8ddff6729f68b3ac
SHA512 4d7187494548a3ee36c52210194c1b149126c58cf8bae0e97c487e7b8248171e9c54480162ec3819395dbc727a517f037cf934b4c4aeaa42c10021e8d4ba65b2
SSDEEP 6144:BCN1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4EgEEhpA:B6/ApUvsfRh+ajZCBAMXoUK0VHYhpA
TLSH
T14184121E2C63680BC07A823C6B34DE3D269BC7EB41A5D768E3E44D477194FC85891AED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4004	236	WerFault.exe	87

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_HEUR.Trojan.Win32.Generic.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:236
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 236 -s 416
  2⤵
  - Program crash
  PID:4004

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 236 -ip 236
1⤵
PID:6140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/236-0-0x00000000004D2000-0x00000000004D3000-memory.dmp

Download