Analysis
- max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/09/2026, 03:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe
- Size 92KB
- Sample260924-eacgvsdc96
- SHA256 af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed
- MD5 b4785edbf0c5dc26878c6efeb3ec8eb5
- SHA1 525a7be0ebc4e7758cb070b8a1aaae2bfd1225d9
- SHA512 cd36f21a78fc1d8d59b97021dd4379d2444843566fe34fe239494a6be38bbf0ed1f8b0d1f5befdb8b51a023c5bc4bb8e481106ae988aadca18e3f457d510386f
- SSDEEP 1536:7wsS5uMx3OG89/nUoC5uIXrc9G/o6dR+je51VJ1kGWqsel0C1vge:75S5uMx3OGS/UXk2cUMe51uMsel0C1vg
- TLSH T1DC936C2135D1C4B2C25615364989CAF09F3DB93019BAD58BFB98037B6F623C2AA37357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\c3c1cac3c8dac880cbd6cb = "C:\\Users\\Admin\\mftf.exe" jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_af1dd86f13c3738f11305501df6473743365031d8f8875dac32d44a2b07c31ed.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:3448