Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 13:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__97973741e8fee919d184b3d8e8ae1631.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__97973741e8fee919d184b3d8e8ae1631.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118__97973741e8fee919d184b3d8e8ae1631.exe
- Size 483KB
- Sample260919-rawa7agb25
- SHA256 8e0b4c48d5698e6754ea3e0981902a7f2a1f48ace7bab584dbda6e870057b6f3
- MD5 97973741e8fee919d184b3d8e8ae1631
- SHA1 dfe50312cd24fbea6571e42be75ed79d140a4e40
- SHA512 5dcf901eb7848769a5c158bda7a4a06b189908525f9a6e17b22aa51d931d62ae65b783603c2e143fe473f6cf1bef7d1cbe1ca50328ef713dc740414438643627
- SSDEEP 12288:cuPnIfFpB8OyBK0Df2cmyiRIEKyP4CmFCyKdeqtkONpcJm39:c5fXBdK3mGEKygCmFCKucJU
- TLSH T1DBB4021296D29137F4F6277049F992931B39BCB09B7993BFD64825D82C217C06A3872F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/files/0x000f00000001c514-4.dat themida - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" jaffacakes118__97973741e8fee919d184b3d8e8ae1631.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118__97973741e8fee919d184b3d8e8ae1631.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\server.exe
- Size 587KB
- SHA256 56519aac09dd4197239b3ea69045c54c63e911dd5f2e0763977f267ee43d4be6
- MD5 f1291b37321108d3143b6ff08b907d0d
- SHA1 e8a30dc391d8b32ed7ee9896a2fa60c249b36951
- SHA512 a0749bb83dcca9257e24513f7e348c684afe678c4aaa32cecffa7d0371f23f1a385f6d0e758d51ebf7b0f8e7c6f262543ed1ab49b6b4f32f104cba3f55fab25d
- SSDEEP 12288:j9hb/FiFyWzEVSUnOHdxnpzvLGDHDONgOQEunlp4o:nboPfUnOfnNHGOwlpL
- TLSH T1D1D4BEB3E492BA6EC25274389436198AC7D503D76F1CA3D7EE09E9245B333F520B0B65
- MD5 SHA1 SHA512 SSDEEP TLSH