Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 23:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe
- Size 55KB
- Sample260925-3dnw3aygnc
- SHA256 dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8
- MD5 ea62682f9666b35d4b986714f810d2d8
- SHA1 6b4e1509053d6e45aadc40de11b74ee1f615f71f
- SHA512 ad7c4ca33215e1dd2583bc3ef688a5cddbdbbffe1d6d1c7ab06a4a1d30bb701737d2ab4234ec50cb79bb452732dbc878a2fbf2149521ae674625c56cb36f619c
- SSDEEP 1536:zxhqbpLsy0IkxqCVsEgYHJPrGLXCoA94YZF:wVV0dVnzt9
- TLSH T18A435B83F9C6D8B3D010C9FC5D25D268A63F3A212E5D08A7F9E52FCD9D7A281191C58E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
pid Process 4700 jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe 4700 jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4700 jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_dd1f6f4dc69fc5dd572fbe8f6f4bf1749cd4e2af5d866c2bccb34e810beaf6a8.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4700
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\222.dat
- Size 30KB
- SHA256 b1d36fb1905a6331912828d9a663b155d867ec11316147a5cfb98b587e256047
- MD5 28a50cc7029a69cf4033814b52b0192c
- SHA1 db9d65ae0771fce8f5d72b50914515b20576afd4
- SHA512 b83ecd9f14eb84f73421004b32c92fa509038147f466d986c59651606fa52c2d3f504981512917817dbe9566450b2291a5d21ebecabf24246b4f5eefc7e03a1f
- SSDEEP 768:LROOdkqy3Vsz4by2/4Nb6HzsGPrGyRm3g8frzC1cem3Qf:LkxqCVsEgYHJPrGLXCoA
- TLSH T17EE24B57F8C1C872E0008AFD6D65D269A63E36703E6C4897F9E52FCE9C3E281092D58D
- MD5 SHA1 SHA512 SSDEEP TLSH