952e0eb42424ce4d3a238315c89311e640495dd59df3f2678bb39aa6f2c05178

Analysis

max time kernel
149s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 07:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.dll
Size 32KB
Sample261014-jeaahsys2k
SHA256 952e0eb42424ce4d3a238315c89311e640495dd59df3f2678bb39aa6f2c05178
MD5 ee8594f47ce5a49a9ca642f7273054a1
SHA1 c34e13a3ac683194d808fef10096bb7783cb3c9b
SHA512 887db0f2bfd683ceed233f416f8437827a2e1c0abcaf8902de56042a81ad200442a71ca13c6f09ba0f2dd4473b41fbe171cdae778d278fdfb16caacee7d6824f
SSDEEP 768:A24K7MjWs6CKSbjsFk+7grzrDN1hVf6ZyZsUeC:A24cY5KSs7gHrDrHUyZsU3
TLSH
T110E26C037A4384A7D3DB023475453BBDDBFDA8301E96A4AAD71296CA5CB45C3EA37203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 2344	3448	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads