Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/09/2026, 21:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe
- Size 967KB
- Sample260920-1q1ehsdc56
- SHA256 7036b70e713d999caf2f1bb786dff34392d50e144360d7e219f73f6199fe5c54
- MD5 279c20c8808adf2406894ec5daf23a8b
- SHA1 081d27b21ee1c31aa43d7f69b5b980a90ba31384
- SHA512 bbc9ea25c1f7bcb3cc4232d55d88be4b05b021f24b546f8fc0dfee19d0256e2e92a4f58224c33da34c99a2ebd2eafb9a1dae47ac5aa7065b88d0ba9e85f987c5
- SSDEEP 24576:Iw+OhEPPiYY8eygO40bvebL0YP2+GsexrP:Iw+TPqieJb6vQ0Ylbeh
- TLSH T12A25C032F3914477D1735E388C1F92AC9835FE012928A9463BEA5E4C5F3BB517A292C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Internet Explorer\Main jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe - Modifies Internet Explorer start page 1 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Internet Explorer\Main\Start Page = "*" jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__279c20c8808adf2406894ec5daf23a8b.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Modifies Internet Explorer start page
PID:3212