Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 09:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe
- Size 1.6MB
- Sample260930-lccc7ssze1
- SHA256 3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876
- MD5 67c27c6e4107b36f43df6bcef1434631
- SHA1 0625ac804139878c78bb808acc67b11ec5dd9205
- SHA512 8a325a4f4b06fc3938c577290f6b05b37eae83a8d265d35c782e12eb5ad5f9f3f45625658b10b57e7034d7536892450b360c186ce9820da16238273767d322c5
- SSDEEP 24576:BKxSXVPFXy0enhsyIdpj9N6ABNSNxPjAin1gJOYXvNw5Hy56h4qCuYTJ:qIFtzvXSZgJHXvkHjFETJ
- TLSH T145755B13B295103BD0772B37582BD2945D3BBA203A6AADCB6FF40D0D0F7D641293E696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4316 jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe 4316 jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe 4316 jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_3e79fd637c3ab5a96d8788ed80bfaca2484e90d7e28a9c2430a03a46b170e876.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4316
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\uDwn-6D9M\Language.lng
- Size 3KB
- SHA256 1a54467e1dbe624a3bd72c4324694f2a2c749bcbaaf914a10c09f80aa7e1d3fb
- MD5 2293a73f596789b7d2d4a8c0e97ce6e4
- SHA1 168ed9ef27453f9e4998175e54d0b61b58d26c0c
- SHA512 1c30b2e8649f628739cb99c9d2dbd992bdc0c82f7092e6b0d608649c70af91b58d3ab4f9ce4de0a9c5ca484769b8d203afa5ebe09180431d1500378d488762d9
- TLSH T18771953F536943F8F8AB034CE9C991EAB68C407A0351509C4CE710A963FF9DBC656997
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\uDwn-6D9M\config.udc
- Size 1KB
- SHA256 f59add1ef70e151abc4df45c066a76da8f18f98f228c6d41ed8033789bcd5180
- MD5 25cdadc31c6885f87329ce49fd359df4
- SHA1 b80a849c303ead893ee90f595c24873f13385446
- SHA512 20d7998e4142bffce36da266e3b99cad3f668db1c6a2d58700a6e8a8df45f8426a8d4dd9d1757eaf2c9a384a60e2ba4c28da806ff1de3850ec95128c25e368bb
- TLSH T1E5319859A43420AEF8776DA234F0D4881FCE9CF64D47B98C085815649FCA55C2353038
- MD5 SHA1 SHA512 TLSH