Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
24/09/2026, 01:42
General
- Target jaffacakes118_04c5e0065dab3ada24425976becc0506ff7a8b03a06cc99cf2cbee3566e891df.exe
- Size 221KB
- Sample260924-b4wwtabd92
- SHA256 04c5e0065dab3ada24425976becc0506ff7a8b03a06cc99cf2cbee3566e891df
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS1⤵
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_04c5e0065dab3ada24425976becc0506ff7a8b03a06cc99cf2cbee3566e891df.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_04c5e0065dab3ada24425976becc0506ff7a8b03a06cc99cf2cbee3566e891df.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2220-53-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-51-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-171-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-261-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-125-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-262-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-123-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-121-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-119-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-117-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-113-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-111-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-107-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-105-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-101-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-100-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-95-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-93-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-91-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-89-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-87-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-83-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-81-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-80-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-75-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-71-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-70-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-65-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-63-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-62-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-57-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-271-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-55-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-49-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-45-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-43-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-41-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-39-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-37-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-35-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-29-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-27-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-25-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-23-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-21-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-19-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-17-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-15-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-9-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-5-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-3-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-1-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-172-0x0000000077C38000-0x0000000077C39000-memory.dmp
memory/2220-170-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-115-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-109-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-103-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-97-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-85-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-77-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-73-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-67-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-59-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-47-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-33-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-31-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-13-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-11-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-7-0x0000000000660000-0x00000000006B2000-memory.dmp
memory/2220-0-0x0000000000660000-0x00000000006B2000-memory.dmp