Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 06:35
Behavioral task
behavioral1
Sample
jaffacakes118__73c3d9d45f9fd10d581ab85877fada8f.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118__73c3d9d45f9fd10d581ab85877fada8f.exe
- Size 90KB
- Sample260919-hcdpgsxeqe
- SHA256 3e852c04128f1cf348293887dc9f0cd2216214707bffef1f71033565c4465fa9
- MD5 73c3d9d45f9fd10d581ab85877fada8f
- SHA1 4a5bc1ff25c62d911f7496c6b6903cac7481ce7c
- SHA512 34e8dd0c172a0d825b4786c88fddac1d04cd6dec781183885d16f7972f6775b5f224e5dc7efd8a1690d6b39b858786be03bb9fde7d02286c884fbc4f39ea7d09
- SSDEEP 1536:rwR9Knh11fSVp9sgAZBYsXOrHlmmE92mh8ty7Tz/vKcF0+u8yMZNvm+MTaP:rUKh11fq9jABLXMHlmmEES8ty7nS2u8P
- TLSH T1FD93012DCB142F92C207BBF58215C74D1EAA6CF58B068683DD26727F2E731A175B4852
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\SysWOW64\cmrst.scr jaffacakes118__73c3d9d45f9fd10d581ab85877fada8f.exe -
resource yara_rule behavioral2/memory/2784-0-0x0000000000400000-0x000000000043E000-memory.dmp upx behavioral2/memory/2784-2-0x0000000000400000-0x000000000043E000-memory.dmp upx behavioral2/memory/2784-3-0x0000000000400000-0x000000000043E000-memory.dmp upx behavioral2/memory/2784-5-0x0000000000400000-0x000000000043E000-memory.dmp upx behavioral2/memory/2784-18-0x0000000000400000-0x000000000043E000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118__73c3d9d45f9fd10d581ab85877fada8f.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\cmrst.scr
- Size 167KB
- SHA256 e34a0a0063fb930f73712d92c10efac86465aaddae6c38928936971a00d44f72
- MD5 a872deb8ed4ae3ebc346e685c66a2229
- SHA1 35d7b4aeed173600bd3c09979f1b9abffce212fb
- SHA512 9e1a41e31605914864c23482c4f5d7b72a1ab1acccb6238bf942511d1fcb8dfc2520780e6ce5d8f15506a07998c184ae63b59a82f19a26bbc0d3c3b5bd9f849c
- SSDEEP 3072:/uKi1jCOQpHs9yI68h6dEDxiRmKjql3dk5BO:/uKi8GOql3dk5BO
- TLSH T141F3D822B600F87E925380E674F1666670BE44DFD46380DAFB3D63448FD6988A753B4E
- MD5 SHA1 SHA512 SSDEEP TLSH