Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 23:36
Behavioral task
behavioral1
Sample
jaffacakes118_e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0.exe
- Size 192KB
- Sample260925-3lp44azw9j
- SHA256 e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0
- MD5 c4d7bea43750420ef53e0c159f9ca201
- SHA1 a1da1417b102b93f3921fae4ca4e7ba966eccaab
- SHA512 cafe0fa41acb752c9c83d79e79d8d75a878d4557af0ef60cf19e581ad015de1784465ef02389c30d4694c96b11c8097006889b4552a4de811984bb41371824c6
- SSDEEP 3072:BQs2ToVNZoFRwi1hoAXLy/nNUUg0LZl+fO+SkG/WNG/yBTc1vX4x61Uq+BPYZmJx:qs2ToVIzXLy/mUg0dwfLeWN7Avh1yPYt
- TLSH T1A214128D1DDE5F00C1211879A96B8D97EE3CDCE98704838666F59ABEBEB73413817470
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1556-0-0x0000000000400000-0x00000000007AD000-memory.dmp upx behavioral2/memory/1556-2-0x0000000000400000-0x00000000007AD000-memory.dmp upx behavioral2/memory/1556-3-0x0000000000400000-0x00000000007AD000-memory.dmp upx behavioral2/memory/1556-4-0x0000000000400000-0x00000000007AD000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_e44d7e95bf53e21b31b2118eb46b0a4f28dffbd4731f2f57fbc7cf9a5562fba0.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1556