Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/09/2026, 04:21

General

  • Target
    jaffacakes118_20 Beautiful Flash Templates.exe
  • Size 423KB
  • Sample260910-eyzbjaxejd
  • SHA256 3ba0b31aa92344ef64396311a78ce34f31edc234c40436d8b0c0b23fa5544c0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_20 Beautiful Flash Templates.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_20 Beautiful Flash Templates.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_20 Beautiful Flash Templates.exe
      "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_20 Beautiful Flash Templates.exe"
      2⤵
        PID:3756

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/1196-0-0x00007FFD08CFA000-0x00007FFD08CFB000-memory.dmp

          memory/1196-1-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-2-0x000000001B880000-0x000000001B926000-memory.dmp

          memory/1196-3-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-4-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-6-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-7-0x00000000010B0000-0x00000000010D2000-memory.dmp

          memory/1196-5-0x0000000001050000-0x0000000001060000-memory.dmp

          memory/1196-8-0x000000001C6A0000-0x000000001CB6E000-memory.dmp

          memory/1196-9-0x000000001BEA0000-0x000000001BF3C000-memory.dmp

          memory/1196-10-0x0000000001080000-0x0000000001088000-memory.dmp

          memory/1196-11-0x000000001CB70000-0x000000001CBBC000-memory.dmp

          memory/1196-12-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-13-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-14-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-16-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-15-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-17-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-18-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-19-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-21-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-22-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-23-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-24-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp

          memory/1196-20-0x000000001EB80000-0x000000001EBE0000-memory.dmp

          memory/1196-25-0x00007FFD08A00000-0x00007FFD09438000-memory.dmp