Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 02:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Crysis.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Crysis.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target jaffacakes118_Crysis.exe
- Size 423KB
- Sample260910-da3hlsdn21
- SHA256 82b49e7c569d2f4ee3a82c420dcc239651a02f9e714fef2f2226119c9e38b91a
- MD5 518dbd3324f597a4b3f720a76f606cce
- SHA1 2e655663a166e8103a5e147f3cbf7a38f96afd04
- SHA512 310ff0e257cb6826a054565905e1cb30be042266dc15f97f7f521c1ff6033bbb7cfa02009cdf90b4a923904fac7d107c49e6975f73061d01c111894ddfed4c3c
- SSDEEP 12288:WyvANCiVTcZQfnfKx2O4E4HMpp5AWtIdgu:DkNg4nCdcWt8
- TLSH T1F994120EDBDCCE73DBD5D2F9D9D19A404BA2C036B683D74ADC24157669023E60A82BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 372 wrote to memory of 3740 372 jaffacakes118_Crysis.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Crysis.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Crysis.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:372 -
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Crysis.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Crysis.exe2⤵PID:3740
-