Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 23:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe
- Size 1.2MB
- Sample260925-3qa6qs11fx
- SHA256 d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d
- MD5 5c1ab7bfc9f6ec870c0359291965e0fc
- SHA1 f91ed930addf20b6e65768a664d82b51079562ad
- SHA512 f18fe0014a5dbb878151b22c0e95d142ede6d92a99507387df504431e6ab86d830159104ef95be1e8271aee8b427537f02ccfd3a3a2fffe34261fea56ef2c664
- SSDEEP 12288:P3RDZux6yZiEn1VSznxrfWV2dvIaXaS+JjZfRhdfHCiXxzPH+8Lctjt9z6SMUy6Y:pZlkiS1IuqvLD+JjDH9k8AD5VMu
- TLSH T113557B23E213C866E9BBA430480B86B49431BF562976AD797BFD7D2CDF326C37815142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\stub jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe File opened for modification C:\Windows\stub jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_d4e52b68974dedd58f38ad96243f1b9c90f726e21a3cdbf39015471a7df6ce3d.exe"1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4156