Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/09/2026, 22:41
Behavioral task
behavioral1
Sample
jaffacakes118__291e3819ede17c5dd87e4052b9050b09.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118__291e3819ede17c5dd87e4052b9050b09.exe
- Size 672KB
- Sample260920-2mfflsfk3v
- SHA256 ba8a9e9c5a25d75a6eaf350855801ddfd28565c344add5e49d6a663cba01054a
- MD5 291e3819ede17c5dd87e4052b9050b09
- SHA1 95095edff61306b6d48f7d6a4b3d2f1dc1b81360
- SHA512 e8b2622d588adf74de6c6304a3f6044d9e0f141b14bf08d6274cd76369453c6ace2121e3393e4f350d98c51e8d7555b60162aad47e714a87204fabb0a9326846
- SSDEEP 12288:4PQTkye9qLclyxlE9v2NuTq5ji8TP5+x26C78og5CvEBVrIQGIrzqGOSVfYLEQ5Q:4gbe83xlENkb5W8Tj9QFJruAzqG1Ycok
- TLSH T155E42321B35E59E9CC8A50388D07E1ECB839BF815C9D648261EF3F856DF38D5E4DA860
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5508-0-0x0000000000400000-0x00000000005D2000-memory.dmp vmprotect behavioral2/memory/5508-3-0x0000000000400000-0x00000000005D2000-memory.dmp vmprotect behavioral2/memory/5508-4-0x0000000000400000-0x00000000005D2000-memory.dmp vmprotect - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118__291e3819ede17c5dd87e4052b9050b09.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5508 jaffacakes118__291e3819ede17c5dd87e4052b9050b09.exe 5508 jaffacakes118__291e3819ede17c5dd87e4052b9050b09.exe