Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
22/09/2026, 13:03
General
- Target jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe
- Size 15.6MB
- Sample260922-qab2wawcmd
- SHA256 d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Djdk.attach.allowAttachSelf -XX:+DisableAttachMechanism -Dlauncher.stacktrace=false -Dlauncher.dev=false -Dlauncher.debug=false -Xmx256M -cp C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe pro.gravit.launcher.colORmCjHNEaTF3⤵
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2108-39-0x000001A0886A0000-0x000001A0886A1000-memory.dmp
memory/2108-57-0x000001A08A1D0000-0x000001A08A1E0000-memory.dmp
memory/2108-56-0x000001A089F60000-0x000001A08A1D0000-memory.dmp
memory/2108-54-0x000001A0886A0000-0x000001A0886A1000-memory.dmp
memory/2108-55-0x000001A08A1E0000-0x000001A08A1F0000-memory.dmp
memory/2108-53-0x000001A08A1F0000-0x000001A08A200000-memory.dmp
memory/2108-48-0x000001A08A1D0000-0x000001A08A1E0000-memory.dmp
memory/2108-49-0x000001A08A1E0000-0x000001A08A1F0000-memory.dmp
memory/2108-30-0x000001A089F60000-0x000001A08A1D0000-memory.dmp
memory/2288-0-0x0000000000400000-0x0000000000440000-memory.dmp
memory/4504-47-0x000001BA9A040000-0x000001BA9A2B0000-memory.dmp
memory/4504-3-0x000001BA9A040000-0x000001BA9A2B0000-memory.dmp
memory/4504-25-0x000001BA9A2F0000-0x000001BA9A300000-memory.dmp
memory/4504-23-0x000001BA9A2E0000-0x000001BA9A2F0000-memory.dmp
memory/4504-21-0x000001BA9A2D0000-0x000001BA9A2E0000-memory.dmp
memory/4504-52-0x000001BA9A2B0000-0x000001BA9A2C0000-memory.dmp
memory/4504-19-0x000001BA9A2C0000-0x000001BA9A2D0000-memory.dmp
memory/4504-17-0x000001BA9A2B0000-0x000001BA9A2C0000-memory.dmp
memory/4504-12-0x000001BA9A020000-0x000001BA9A021000-memory.dmp
memory/4504-27-0x000001BA9A300000-0x000001BA9A310000-memory.dmp
memory/4504-58-0x000001BA9A2C0000-0x000001BA9A2D0000-memory.dmp
memory/4504-61-0x000001BA9A020000-0x000001BA9A021000-memory.dmp
memory/4504-63-0x000001BA9A2E0000-0x000001BA9A2F0000-memory.dmp
memory/4504-62-0x000001BA9A2D0000-0x000001BA9A2E0000-memory.dmp
memory/4504-64-0x000001BA9A2F0000-0x000001BA9A300000-memory.dmp
memory/4504-66-0x000001BA9A040000-0x000001BA9A2B0000-memory.dmp
memory/4504-65-0x000001BA9A300000-0x000001BA9A310000-memory.dmp