b88384469082b643cec175bdb448abbe3112286144ef25c22932786309b216d6

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 05:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe
Size 883KB
Sample260919-gamnyaxcld
SHA256 b88384469082b643cec175bdb448abbe3112286144ef25c22932786309b216d6
MD5 6d57f4755c870d7be9a5a1f29d827a3c
SHA1 bf4c11ff2c76078a3fb4060b881fa706b6f51f2e
SHA512 0e71fadc71635cdfe0750f282cf5397fd7f6306774bf02ce9fc2ad482db7df36a7155db7e9902f3703e1cbb8b70bccff92cc38973b72a5a0df060936552af603
SSDEEP 12288:QACAwTj7sGwrnf0sySw+RioG8R19afFeyN60tYTViTeyJH36rGfLs2mptPqRD:LCdgGwrn0WRPvofYy65i536rG/0w
TLSH
T12F15238287D55A93ED6187B442E3FE7F2764B3E0E10516220BA039DB162858E493FF5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
1948	jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe
1948	jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe
1948	jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__6d57f4755c870d7be9a5a1f29d827a3c.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1948

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsr6E22.tmp\System.dll
Size 11KB
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
TLSH
T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cloud-Web_nad_2_70.dll

Path C:\Users\Admin\AppData\Local\Temp\~nsis\Cloud-Web_nad_2_70.dll
Size 531KB
SHA256 fca90f7d83dfe5933fe3994e3644d1ce10e9b316eb432d75dd6da9be87a766fd
MD5 baa82af11cdf29b93ad09614d51e7407
SHA1 303d4ba397797ce361083ca9f58d1ffa0ad5c519
SHA512 e7e5959a85edfdfeb831e8e2157e306c0ad367f3235aa1248dfd74bc2da71b4272d188b4ac3a2c16d46ced6bc9215b3a496f14fdb5fc981b2ad0a0fd922fac00
SSDEEP 12288:WoxP7ijRDYsZNa8JU7aAlxZoZ4qafiSIjL:fxP70ZrJizboZ4qafiSIjL
TLSH
T1BBC4C630B135ADB7F2AA05B07C7DA514709B2F601740548FA7C6BC292AF3792616CE6F
MD5 SHA1 SHA512 SSDEEP TLSH