Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 03:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe
- Size 443KB
- Sample260910-dklb3svfke
- SHA256 a544895d6950aef53391bb1d2f9a65cb2a3c31656a25da283616ccf65a5a7f6b
- MD5 b9f2f67c13e95976a18ec66317c75ab8
- SHA1 69edf86271d611f618ecd115c5e456a878f69c64
- SHA512 546bf540fd02f69e22297c9161d2edfab1fd1d6766f7cc71aeb956c58e833b92f54a8cc617432ca5aef04d19fcced17ef21972661e8dde4dd49694cf60e7b884
- SSDEEP 12288:jNLfhZzvvg7UVVQbTmJsFEK2YThctfcG0h7r0py:jphBHgUHoTiSqYTY87r
- TLSH T112A40152EA298612EC4C30F084C759551331AE0AB942FB9739BC766E15B1FA3CF13D9E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- UAC bypass 3 TTPs 1 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe - Checks whether UAC is enabled 1 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe - System policy modification 1 TTPs 1 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Darkroom.Pro.v3.4.iPhone.iPod.Touch.exe"1⤵
- UAC bypass
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System policy modification
PID:3632
Network
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2