7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe
Size 36KB
Sample260924-ejqqvayvht
SHA256 7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b
MD5 29ba2f0a7c60c614b7dbd739b2cb2643
SHA1 3e334e87a086053b45e2f45562f96401a282c9b8
SHA512 54da518dd7958bdc0b21dfc9d6155f1a540eb86ad512a43b1aa2d94cc75a5351fda68496ff73c31659e180585e269bed7280632c2853a217d0f2ecbc8f93a21c
SSDEEP 384:r4nOA611UYXhuGGH9cYZC5K/IyBC3E8X10YOmgz:UnOA6vAc7J53E8X109m
TLSH
T1D4F25B7779C74873C4D6827194B04B274B7F22622DB1909BDB80294B2F32ED5AD3E352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HaRRo2.exe = "C:\\Users\\Admin\\AppData\\Local\\Temp\\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe"	jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\HaRRo2.exe = "C:\\Users\\Admin\\AppData\\Local\\Temp\\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe"	jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe"
1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
PID:4904

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7ea6ab582c4d57afed213f33876d310f951fbd7f31989bb688eb9a7c9c27f96b.exe
1⤵
- Adds Run key to start application
PID:1140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads