Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 11:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe
- Size 62KB
- Sample260924-m8bl8acb39
- SHA256 860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd
- MD5 b0c6d017f7455adf473eab9c93b76e2a
- SHA1 388f11b5a59063cdea4b6d5b9c9acd9240825d20
- SHA512 05a5a6af37d8147101b262167cc0692c913df3123c8b6ec1d973f5148e24cfafe301b8c0c5d712b04367ed44cb867d8abd5996456058ffc77157aa6025d6833b
- SSDEEP 768:4M8JRvVkZj8Rs7Ri/RTnrgGlA9iw80Ij+SACC8pEmtqwkEKYF3w7q4DXeOtdKrg3:4nRvVuj8R6C3HA91Y+SACNkDqt4FRJM0
- TLSH T17A535C46F9C2C4BAD03085FC6D25D15EBF2B36A01D6809D6BEEE5FCCED6A281052C947
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 5324 jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe 5324 jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe - Drops file in Program Files directory 3 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.dll jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.dll jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.sys jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5324 jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_860b744f9fda613e722a92a2dcb78b8fa82b3b211c84c5bb442ed6dfc23f6bfd.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5324
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\Common Files\microsoft shared\MSInfo\IEINFO5.sys
- Size 33KB
- SHA256 8366ae2dd81b106c3a297d11caa145f61f7baec3942bc354d61c4bc88b91c69c
- MD5 1b8745ad69964af9ece1d307a3cf7d89
- SHA1 527af567e0bc08b7f0010d65ad5f68c681faae31
- SHA512 0b37e7f6e4d506075b8c650dcac58527f140b4f714c4342aa52cfd3664857ba8c215ff6af6a054188aa5518c1ba298f25714475dc30e766e90ff50515d6d0429
- SSDEEP 768:fj+SACC8pEmtqwkEKYF3w7q4DXeOtdKrgjJ1YLv:b+SACNkDqt4FRJMv
- TLSH T1F5F27B45F992C479E13085FCAD24D05EBF6B76B01E6009D67EEA5FCCEC2A381466C583
- MD5 SHA1 SHA512 SSDEEP TLSH