Overview
overview
3Static
static
3jaffacakes...84.exe
windows10-2004-x64
3jaffacakes...84.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$R0.exe
windows10-2004-x64
3$R0.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 11:09
Behavioral task
behavioral1
Sample
jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$R0.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$R0.exe
Resource
win11ltsc2024-20260709-en
General
- Target jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe
- Size 5.7MB
- Sample260910-m88xqabl8s
- SHA256 63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284
- MD5 08ffa72c59093ffbdfe38bad57cb7e26
- SHA1 7671cc9506f0ddaeea7319251a35773f693491d6
- SHA512 75d614344b0f35d2dd3b36191c4118c976e07d6a37a8f03c5733a9bd626d9602c9ea26981f5b2fa580eadfafaf8dfab07b31a600d5ef6ec5b60a2171ac68b0e9
- SSDEEP 98304:lCiaK21U0Y+RzqfNTMvo4oBUnUZa4JURDRaBENGl58xB/xbUu+4:lJaLZrqt4XU94RMENGD8xBVU74
- TLSH T1BE563363BA467D95EAE80F727576CBF8CD15CBE31100539F8A07E2B9E95009D6A03387
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_63e8453deb1378dfa3b8a4e72cf251da5e7896fc60e9aa2bcda1fc94a2981284.exe"1⤵
- System Location Discovery: System Language Discovery
PID:468