Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 22:52
Behavioral task
behavioral1
Sample
jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe
- Size 27KB
- Sample260925-2tesnaydkf
- SHA256 7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df
- MD5 61f7021d18f436ff7032db98bb6e8e71
- SHA1 11be05d25288d9e6d53643737d3a3e7e51f40fd4
- SHA512 fc378dff657eac813a2b547f39855e777868233dd7f6fb51a15db01bf9e7f1f99abbfe54bc13d4afb61e308241b08f74c680654793c9041796323d3efbe5a94f
- SSDEEP 768:mBwm3TDMN/oSHSb+0HtdKgqXsDd1VaXWCFZCWiCGbGqPveuk:GHDDkHMGgqcDLkXW6oUGbPfk
- TLSH T146D2F14B8732CA35CBD8B47DAD29C566967BB1B4E6B43E416D70920D9BBA3B50CC0D10
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/4244-0-0x0000000000400000-0x0000000000410000-memory.dmp upx behavioral1/memory/4244-1-0x0000000000400000-0x0000000000410000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4244 jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_7be7eb5a3983cb0297ec72b6ea0734b3eb8c396efa3f131a3bfa8c84a2b0b8df.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4244