Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 03:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe
- Size 4KB
- Sample260924-ebgg7sdd39
- SHA256 b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b
- MD5 4a6d77e862e3247fc88ae49e6eea6a83
- SHA1 6d121497d1bb86bc9a614e827d37411bdd55fe06
- SHA512 fef7ad13933cad24e96a75eeace566bf81c6f89ce316bf6e344b626cc3f09e49387f12e407108174fbe4e728fbf8f63cf988fce7c4912d4f4e0111b878d51ef4
- TLSH T1CC81749B6BD94EB2D380E7B504D28712F9BB603403E3A3501EF51E049A75260F83DB8C
- MD5 SHA1 SHA512 TLSH
Score
7/10
Malware Config
Signatures
- Creates a file in the Startup directory 1 TTPs 1 IoCs
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msoffice.exe jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_b2cbbf262ad730c10ec3dd7ad105954ada13e5d155e0fc2594f688629d56926b.exe"1⤵
- Creates a file in the Startup directory
- System Location Discovery: System Language Discovery
PID:2896