Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
20/09/2026, 23:34
General
- Target jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe
- Size 813KB
- Sample260920-3klqaass8r
- SHA256 1801e1eeada8b05bf44093ccfe14ab15ad6e753274590d9c872ba416e4dc2a3e
Malware Config
Signatures
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118__2aa5c00b5f081c2586606c5c4add98ba.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3388 -s 3122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3388 -ip 33881⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3388-0-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-117-0x0000000077378000-0x0000000077379000-memory.dmp
memory/3388-142-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-214-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-213-0x0000000077378000-0x0000000077379000-memory.dmp
memory/3388-166-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-164-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-162-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-160-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-158-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-156-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-154-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-152-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-150-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-148-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-146-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-144-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-138-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-136-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-134-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-132-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-130-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-128-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-126-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-124-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-122-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-120-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-118-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-141-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-110-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-112-0x0000000077378000-0x0000000077379000-memory.dmp
memory/3388-111-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-108-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-103-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-101-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-98-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-96-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-92-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-88-0x0000000077378000-0x0000000077379000-memory.dmp
memory/3388-86-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-87-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-84-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-78-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-77-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-76-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-69-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-66-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-64-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-57-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-58-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-53-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-47-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-48-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-45-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-38-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-39-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-36-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-31-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-32-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-29-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-25-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-20-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-16-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-14-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-12-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-10-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-9-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-6-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-4-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-2-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-116-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-106-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-94-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-82-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-73-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-68-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-62-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-55-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-50-0x0000000077378000-0x0000000077379000-memory.dmp
memory/3388-44-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-27-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-22-0x0000000000800000-0x000000000086C000-memory.dmp
memory/3388-1-0x0000000000800000-0x000000000086C000-memory.dmp