9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 09:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe
Size 46KB
Sample260924-ljtk3aae76
SHA256 9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760
MD5 05dd1effda33937c262f8eaa60d8094d
SHA1 8aecaae5e342197d3db40d18fdc456cf5ac1c66b
SHA512 f99cacf46069e3e01cfd7a95b619141980cf1f5470edcd45f72a6aa3256ecd25fa69215e7f7482e34cbea4e3e84ec76df28f802ac5566a4ad389a402c34e9112
SSDEEP 768:6lwqdjElDvwVQzdAEHZwr+nwGnIt1yC2dHUE75e75eJMnD126Xj53+TX:6wqdjEWQBnrnwveC+s9DeX
TLSH
T1D5236C03B6F04AF6E062CEB89C3AD814DB377D721D38905CA7790ACF4D792929819397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\Aï =	jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe
File created	C:\Windows\AnsiStringÚ8 ¸fIntegerÝ\|ßog_$%fg12SetLengthbAnzAywolfstationAnsiStringÚ8 ¸fIntegerÝ\|ßog_$%fg12SetLengthbAnzAywolfstationAnsiStringÚ8 ¸fIntegerÝ\|ßog_$%fg12SetLengthbAnzAywolfstationAnsiStringÚ8 ¸fIntegerÝ\|ßog_$%fg12SetLengthbAnzAywolfstation	jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9f3af903ccf779476c0924177f96758c44e2903b5bd225e246b45c45c2329760.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4772-0-0x0000000000400000-0x0000000000411000-memory.dmp

Download