Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 03:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe
- Size 106KB
- Sample260924-d86b6aycrd
- SHA256 d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414
- MD5 4668b7822f5b094a3d97f76661adfae3
- SHA1 11a6767bdc5789e01e836bdef34223f6f03fc5dd
- SHA512 027d28692ce73b1feca378d3aecc40e1501e423ad8dd5a73240327de5e092afd804a00c9f987a89e3ed283a45b6dac71395cfb7a66181f56f8f1e1e8638ffe6a
- SSDEEP 1536:WdcwCwYFQPn8RYH0U9FwMesTsN5ruEhPoQDgp4EiWbUH6ZvYC/mOW1Pj:WhYowYU99ss+fQ0vYC/mOW1Pj
- TLSH T1A6B35B107581C072C09A14738D2ACAFA9A2DF53117A599E3F7E40BBE9F715D0AB3D18B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-650287814-2715975232-1279715623-1000\Software\Microsoft\Windows\CurrentVersion\Run\c5c7ccc9cac6df86cdd0cd = "C:\\Users\\Admin\\abnw.exe" jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d620a65218ed83f138d859210fe40beae964d43bedcf283cc8dda1ca128c9414.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:1276