Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 03:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe
- Size 96KB
- Sample260924-ecrdsszz8p
- SHA256 a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c
- MD5 aa9d7f7ed4fd933f077b626dfd6e8e7f
- SHA1 c16c0963d0caa3e07ea3eb418e9692ab4c102f55
- SHA512 e3797ad040c7e5f42d6780660241e574c9c09f5780b27544ff4bda6ab00dc5c01a2c3ff2746741e312d1dc812374c1d5462abb39578cf571b286d0732afc643b
- SSDEEP 1536:10qAQaFNDuG+yy9ElBGoTXUXO+1oV7wEpRM66nzDNEx2c3WYrz+orOCrh/Q9:+XLDFOEWsXB+1oWEpRMtnzDNEgc3bzSf
- TLSH T1EBA33B53F2D08CB3E1F11BBCDC15A694A83ABD202D29574A77E82E4C5D7C6C0691C6DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\ScanRegistry = "C:\\Program Files (x86)\\Common Files\\update\\update.exe" jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe - Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\cq.exe jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe File created C:\Windows\SysWOW64\cq2.exe jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe - Drops file in Program Files directory 1 IoCs
description ioc Process File created C:\Program Files (x86)\Common Files\update\update.exe jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_a694a431eae310c22f3806bd6c8a1f8c6024010c804a3afd8022c6846a9ccf1c.exe"1⤵
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:3452
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\cq.exe
- Size 101KB
- SHA256 357af703302b0315054fdf56fb993d0100636a8507cf4685cc08dba4305ca065
- MD5 3198cc7d7e880561034cd8a70fbf1ac1
- SHA1 973800c536f6e89c720e3cd54aed693ffb182be4
- SHA512 0d2a2ec45f40b26d2c23988b938025ec5bc07e5f24291325aefee435282efb641735b66769f864724f8a6711e3c6f8d728c517ec03cd93549f9a566c3e72037b
- SSDEEP 768:+y0hcV/OKvaDitdFGlqr7iMyeTT/h5Si75yPT6O0ut9Iuy8T1ZngXnWgyqTfz9OT:70FZRdv5F
- TLSH T192A39920E401181AF693CDAF20C8FD526F55CCD19701676BF5688A4C9BDE4BAE38D736
- MD5 SHA1 SHA512 SSDEEP TLSH