01f2d1945631286c3ba10a508b933e0c0c5a4b475f51eebe2a9c42382782b02b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 11:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
Size 604KB
Sample261014-netflstxdy
SHA256 01f2d1945631286c3ba10a508b933e0c0c5a4b475f51eebe2a9c42382782b02b
MD5 34d88cdd9428f021ddff203934175f82
SHA1 912224155073599d8a9b0271a217197d55ae8e20
SHA512 898e9c8c12cb5785a28a2ff3223cb2b2b8954a369dfe55fbb371d90c00430f1a043ec4702fdfc70f4aed08d80fd1b2ee145b96be44a7358606bad78a5cc8c434
SSDEEP 12288:tXCsdBOVi8e7S2OQgY7uWDO0qq/LBict0ijsUEA4DbM9TI:0KCyz7TDO0qGYHpg4DbM9T
TLSH
T112D47C325F7C86C6E8D328731A25CD7496342E9002476BB7FAACB75C1B6AD1254B423F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_UDS.DangerousObject.Multi.Generic.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1208	jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
1208	jaffacakes118_UDS.DangerousObject.Multi.Generic.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_UDS.DangerousObject.Multi.Generic.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1208-3-0x00000000022E0000-0x00000000022E1000-memory.dmp

Download

memory/1208-4-0x0000000002380000-0x0000000002381000-memory.dmp