Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
22/09/2026, 13:03
General
- Target jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe
- Size 15.6MB
- Sample260922-qab2wawcmd
- SHA256 d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Djdk.attach.allowAttachSelf -XX:+DisableAttachMechanism -Dlauncher.stacktrace=false -Dlauncher.dev=false -Dlauncher.debug=false -Xmx256M -cp C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d8fd934e69c2e8e122bb9917894f4daecdc4d16b00076925c1938ef51d1cb001.exe pro.gravit.launcher.colORmCjHNEaTF3⤵
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/1192-46-0x0000017580270000-0x0000017580280000-memory.dmp
memory/1192-54-0x0000017580000000-0x0000017580270000-memory.dmp
memory/1192-55-0x0000017580270000-0x0000017580280000-memory.dmp
memory/1192-56-0x0000017580280000-0x0000017580290000-memory.dmp
memory/1192-57-0x0000017580290000-0x00000175802A0000-memory.dmp
memory/1192-53-0x00000175F3F30000-0x00000175F3F31000-memory.dmp
memory/1192-51-0x0000017580290000-0x00000175802A0000-memory.dmp
memory/1192-49-0x0000017580280000-0x0000017580290000-memory.dmp
memory/1192-30-0x0000017580000000-0x0000017580270000-memory.dmp
memory/1192-39-0x00000175F3F30000-0x00000175F3F31000-memory.dmp
memory/4540-0-0x0000000000400000-0x0000000000440000-memory.dmp
memory/5832-48-0x0000020106D60000-0x0000020106FD0000-memory.dmp
memory/5832-58-0x0000020106FD0000-0x0000020106FE0000-memory.dmp
memory/5832-25-0x0000020107010000-0x0000020107020000-memory.dmp
memory/5832-23-0x0000020107000000-0x0000020107010000-memory.dmp
memory/5832-21-0x0000020106FF0000-0x0000020107000000-memory.dmp
memory/5832-19-0x0000020106FE0000-0x0000020106FF0000-memory.dmp
memory/5832-17-0x0000020106FD0000-0x0000020106FE0000-memory.dmp
memory/5832-12-0x0000020106BE0000-0x0000020106BE1000-memory.dmp
memory/5832-3-0x0000020106D60000-0x0000020106FD0000-memory.dmp
memory/5832-27-0x0000020107020000-0x0000020107030000-memory.dmp
memory/5832-61-0x0000020106BE0000-0x0000020106BE1000-memory.dmp
memory/5832-62-0x0000020106D60000-0x0000020106FD0000-memory.dmp
memory/5832-67-0x0000020107020000-0x0000020107030000-memory.dmp
memory/5832-66-0x0000020107010000-0x0000020107020000-memory.dmp
memory/5832-65-0x0000020107000000-0x0000020107010000-memory.dmp
memory/5832-64-0x0000020106FF0000-0x0000020107000000-memory.dmp
memory/5832-63-0x0000020106FE0000-0x0000020106FF0000-memory.dmp