Analysis

  • max time kernel
    148s
  • max time network
    129s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 12:02

General

  • Target
    jaffacakes118_bd176986344fef0b191170684c1b94c866f846d1af8cfb001ccad634e89778e2.exe
  • Size 1.4MB
  • Sample260930-n7pccswckf
  • SHA256 bd176986344fef0b191170684c1b94c866f846d1af8cfb001ccad634e89778e2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bd176986344fef0b191170684c1b94c866f846d1af8cfb001ccad634e89778e2.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_bd176986344fef0b191170684c1b94c866f846d1af8cfb001ccad634e89778e2.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4296
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4296 -s 1448
      2⤵
      • Program crash
      PID:2968
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4296 -ip 4296
    1⤵
      PID:2860

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          style-ie7.css

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style-ie7.css
          • Size 904B
          • SHA256 a7b66e20140881d7b57009fc22647b005c0a94515d66af57367302a34227c66b
          • MD5 SHA1 SHA512 TLSH

          style.css

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style.css
          • Size 7KB
          • SHA256 36898487c21daf59cf0b6f1437a109717c9890d3ea815c962a4881f99783ffa9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          AgreementScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\AgreementScreen.jpg
          • Size 9KB
          • SHA256 1f4b39dda7a2c4181c7164cdd35e60d04cd232208613bf2bef99b9450ff3915b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CatalogueScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\CatalogueScreen.jpg
          • Size 18KB
          • SHA256 621cdb5117b14db8804bc9fd2472b00c0d809a97975b443400a0b901d7452910
          • MD5 SHA1 SHA512 SSDEEP TLSH

          DownloadsScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\DownloadsScreen.jpg
          • Size 15KB
          • SHA256 5cda60d4abb1d57b6f10e0d91d4f9a8100d95aaa1ac118d218f981b71c6154c1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          FeaturesScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\FeaturesScreen.jpg
          • Size 12KB
          • SHA256 3e5faa57bfc6def55ae8052f5aa8efc258a3ad8f3cb9b40691a8b565071fba04
          • MD5 SHA1 SHA512 SSDEEP TLSH

          InstallScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\InstallScreen.jpg
          • Size 16KB
          • SHA256 5808ddc486e21f939ef8613b5793fa64f2c2491a76455dfb1a184ef04c04292b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Marker.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\Marker.jpg
          • Size 771B
          • SHA256 99793d62273ab6b91ec41fb4fa9ff08f91661a3ddb85fa128e1724f1572d7134
          • MD5 SHA1 SHA512 TLSH

          MediaLibraryScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaLibraryScreen.jpg
          • Size 15KB
          • SHA256 d1c443a32e41d0e54b26f3d775342ccd963892c82a8ef651280f2d8d4612566e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          MediaPlayerScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaPlayerScreen.jpg
          • Size 10KB
          • SHA256 b5beb00448cd2f9bb8c148ddaa20f97474a41fb965b60bb5ac3181924c1e5e27
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SearchScreen.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\SearchScreen.jpg
          • Size 24KB
          • SHA256 459ffe46bd712ad7300627dc062e97b25902d0fc1945c1002f2ddd29b383f64d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          TabBg.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\TabBg.jpg
          • Size 1KB
          • SHA256 6ff2ede122e7a8c88cddf2074ef64a191501b8cdb2d007a7acbf9fdcbe1b15a2
          • MD5 SHA1 SHA512 TLSH

          check.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\check.jpg
          • Size 1KB
          • SHA256 2e19f60efa95f693c0b1a00605df9e4d2ab22bb2b388f828118f5a91396635d2
          • MD5 SHA1 SHA512 TLSH

          check1.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\check1.jpg
          • Size 367B
          • SHA256 c216337bb4c7683219a0c5c3ccd917e05e96d6cf627d10bdd2d5d46bb354e142
          • MD5 SHA1 SHA512 TLSH

          faceless.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\faceless.png
          • Size 9KB
          • SHA256 180187996baffd77d01998bc63b9b199b182a06c88d179859b8e1880fb51723e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          finish-flags.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\finish-flags.png
          • Size 14KB
          • SHA256 a98567be6cb7f78237862f451d479df10402d6ab7d8f807476fee069efbb66e2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          header_cycle_arrows_shape.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\header_cycle_arrows_shape.jpg
          • Size 2KB
          • SHA256 a2c2c1fd5f0273adf862bfdb3d2539e8f278792ea85d70e91ef0b1d1cba1adfa
          • MD5 SHA1 SHA512 TLSH

          installbutton.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\installbutton.jpg
          • Size 367B
          • SHA256 db4a08aca4e4a97db0dd3caed7d660b4f5028597f1583e604a2918b1eaf4dc83
          • MD5 SHA1 SHA512 TLSH

          kaspersky.gif

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\kaspersky.gif
          • Size 4KB
          • SHA256 e0a0d2f03fffdb05f019b5e35869367606f24a00a26739bba825a6efb78bb98e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          loadinfo1.gif

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\loadinfo1.gif
          • Size 6KB
          • SHA256 8e828b825886d6cffcbd968c323287a676586eda096db4eee58957ade5dfcd20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          logo.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\logo.jpg
          • Size 2KB
          • SHA256 e34901a370661bb015b7ebd6d5ce33ae4dbff08f12dfbb65b7d3f8cc48fd288e
          • MD5 SHA1 SHA512 TLSH

          menuBg.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\menuBg.jpg
          • Size 2KB
          • SHA256 35a2ac79c81dfb8c3ccb23713b3ca93d3713542f822aa46f0d63c7b473b11499
          • MD5 SHA1 SHA512 TLSH

          next.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\next.jpg
          • Size 664B
          • SHA256 ecc4d9ba2c50cdecfd3fb4c9089be82ba897857721d394e5c953a7d1d469f885
          • MD5 SHA1 SHA512 TLSH

          start_en.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\start_en.jpg
          • Size 1KB
          • SHA256 d3feae909b667e7117cdca18f386fe70cfaf48d99286fa7d66a7157d385d275a
          • MD5 SHA1 SHA512 TLSH

          index.html

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
          • Size 10KB
          • SHA256 f0261398e0fd52939dbf635abb0bccffc295028b696fb25d88fb10d16ae544c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          DD_belatedPNG.js

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\DD_belatedPNG.js
          • Size 5KB
          • SHA256 8c61dcfbc3dda3c82b2bbe977d816ed71cfb98a12545f2b2b1d218178e13b238
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jquery.js

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\jquery.js
          • Size 89KB
          • SHA256 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scripts.js

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\scripts.js
          • Size 2KB
          • SHA256 4c7edbc76ee5063dda92a378b41f7d6f4c88489bf6fb9a536794cbfc483e53be
          • MD5 SHA1 SHA512 TLSH

          memory/4296-0-0x0000000000400000-0x000000000056E000-memory.dmp

          memory/4296-1-0x00000000024A0000-0x00000000024A1000-memory.dmp