Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 02:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Best HQ Wallpapers Collection 23.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Best HQ Wallpapers Collection 23.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target jaffacakes118_Best HQ Wallpapers Collection 23.exe
- Size 888KB
- Sample260910-dgzqasxtgw
- SHA256 9a662fe389b62cb2b4d1da7a2d0c6b1eae0e4dd6e2a96a08c5b13f964058ce89
- MD5 2c12c586ffd38de766be32089f438571
- SHA1 b6fd4b9b5f5787103e77e6a7f301268548623b7e
- SHA512 2e9addaac517bd4732e0063e99a860c5501479b04b83ac0151c1601f7ec77700cc6747bc24f2a92366c8b4b73297ebdf802f1958b8ef52dd821eb420d95bebf7
- SSDEEP 24576:WwIxB2m6kgFlqx1/jI75Wc5BYWmQIx0SYOXcttn:WwCB21FUxyv0x0SKtx
- TLSH T1D7156B32F681D4B2E1623AFC4D1BD6D5582DBE209D28545B3AF43F4C1A3DA43ED2429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 checkip.dyndns.org - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Best HQ Wallpapers Collection 23.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 812 jaffacakes118_Best HQ Wallpapers Collection 23.exe 812 jaffacakes118_Best HQ Wallpapers Collection 23.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 812 jaffacakes118_Best HQ Wallpapers Collection 23.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Best HQ Wallpapers Collection 23.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Best HQ Wallpapers Collection 23.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:812