Analysis
- max time kernel
148s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
20/09/2026, 23:34
General
- Target jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe
- Size 813KB
- Sample260920-3klqaass8r
- SHA256 1801e1eeada8b05bf44093ccfe14ab15ad6e753274590d9c872ba416e4dc2a3e
Malware Config
Signatures
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4360 -s 2722⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4360 -ip 43601⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4360-41-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-45-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-208-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-213-0x0000000077592000-0x0000000077593000-memory.dmp
memory/4360-212-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-211-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-194-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-187-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-181-0x0000000077592000-0x0000000077593000-memory.dmp
memory/4360-179-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-171-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-165-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-158-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-150-0x0000000077592000-0x0000000077593000-memory.dmp
memory/4360-149-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-135-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-133-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-131-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-129-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-128-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-125-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-121-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-119-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-117-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-115-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-113-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-111-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-109-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-107-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-105-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-103-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-101-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-99-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-97-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-95-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-201-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-93-0x0000000077592000-0x0000000077593000-memory.dmp
memory/4360-92-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-91-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-123-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-88-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-86-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-84-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-82-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-80-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-78-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-74-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-72-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-68-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-67-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-64-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-62-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-61-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-59-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-57-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-53-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-51-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-49-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-43-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-39-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-37-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-35-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-33-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-31-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-29-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-27-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-23-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-21-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-19-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-17-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-15-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-13-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-11-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-7-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-5-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-3-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-1-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-76-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-55-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-25-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-9-0x00000000005D0000-0x000000000063C000-memory.dmp
memory/4360-0-0x00000000005D0000-0x000000000063C000-memory.dmp