Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/09/2026, 21:49
Behavioral task
behavioral1
Sample
jaffacakes118__27853142a4b9e488233fc6af1a077f20.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118__27853142a4b9e488233fc6af1a077f20.exe
- Size 13KB
- Sample260920-1pasgattcs
- SHA256 0df1db7d82cfdb74de38e881a384164cfc595ca661ec3ee7244199557ead314e
- MD5 27853142a4b9e488233fc6af1a077f20
- SHA1 452ef03aba0be40e6688d7fc401eded4346062e9
- SHA512 a8ca6040c6575495779d3f0611914e43ab4410c57cd2b1a37ad695debc69a80721512498f174de0af5900a43b1a089d77483f7e3bf4f68fe2afe85cee78d7c05
- SSDEEP 384:TVpCcym8GK+AC4PsV/A5AVcRbfwYLN6JUI:TNypOonRk
- TLSH T19C5209AA0FACCC61C6EE91B482CF4644174CFE001591F253989976074F79DC589DBF5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4456-0-0x0000000000400000-0x000000000040E000-memory.dmp upx behavioral2/memory/4456-14-0x0000000000400000-0x000000000040E000-memory.dmp upx behavioral2/memory/4456-16-0x0000000000400000-0x000000000040E000-memory.dmp upx - Drops file in Windows directory 2 IoCs
description ioc Process File created C:\WINDOWS\828388146034340 jaffacakes118__27853142a4b9e488233fc6af1a077f20.exe File created C:\WINDOWS\828388146034340.exe jaffacakes118__27853142a4b9e488233fc6af1a077f20.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118__27853142a4b9e488233fc6af1a077f20.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\828388146034340
- Size 170KB
- SHA256 e1e7eb4466e4b32ffb19d06ea5996e43ebdcd591ae49d6e00200abcf82224cd4
- MD5 43e8f910c408f1f4fb8cb338919610ee
- SHA1 5d02e50f89669e9e0078bd3992192052062c921b
- SHA512 10159335d2d864097d59936077fb39270f1cc94c5df1d869ba0b958a74b1ca03c8c21d559b344d03b9df78d458276f6030922d32cd535d1acb6eedca7cdf1b5c
- SSDEEP 3072:/uKi1jCOQpHs9yI68h6dEDxiRP+sql3dk5BO:/uKi8vtql3dk5BO
- TLSH T10604D922B700F87E925380E674B1666670A944DFD47380DAFB3E23448FD6D89A753B4E
- MD5 SHA1 SHA512 SSDEEP TLSH