Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 10:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe
- Size 103KB
- Sample260930-mdrd7ace42
- SHA256 6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5
- MD5 9df1a884670a46e53d5caf56a86f1269
- SHA1 e431d7a65d2c3bfb50b16f4f741ef9f000161349
- SHA512 198ed0504c1f79c5bb117ca17508d82c535309b98098dd0b788511cc51b20b18258fad77bab9a56c96e25b3c714defaf9ea09736099d13f3ca2959232435115a
- SSDEEP 1536:eUICIUwWKH+TkXn28B3xsE+fKBcJ6bO6Msq1ke:eUXNkXV3GvP0bdMsq1ke
- TLSH T110A34A0139C3C073C44560754C82C5B5A736B8765AF89CC3BBE42B7DAE756E26E3E226
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2251218687-1689653882-3767565116-1000\Software\Microsoft\Windows\CurrentVersion\Run\47454e5a444246044f524f = "C:\\Users\\Admin\\pnhl.exe" jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6e8f1098905040bb7623f676070ba84ff670228fa3553f2b06877e9091c967e5.exe"1⤵
- Adds Run key to start application
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:6128