Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 09:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe
- Size 74KB
- Sample260924-lfxtbasyd1
- SHA256 52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2
- MD5 dc2ceeb40767e62d38079d31c6516338
- SHA1 6b69d26096d978e31428acbf9d5464c5a5acf5f8
- SHA512 ad024efd58b64ebfe0c68018e9e7e190390b0af95163bb8a0ae64cff2023a265572e65d9ecbb5f8f514396c2c5d053a5cdad80f168b42f26dd216688b5ce7101
- SSDEEP 1536:0hHLr1qLXd5E9a/9/WTBdu7si+Q9tn7TrrzIQG0t0n9HnbP1aX6nn9:01pqLXd5E965SqyQ9tnzL9SnOqn9
- TLSH T11373D101F7AA5AA2F6D106712B7601742971BC30721A9F0F25867F6E2C3B1508D2AF3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_52312e6cec8203288186dd00d10a74dd8440d6365730cd1a080d900d8ca474a2.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4460
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2320