Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe
- Size 820KB
- Sample260930-n9kryswcph
- SHA256 070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846
- MD5 6ee080ace056b2da70b1cdaf69b715f1
- SHA1 029fa0329c6894ed38826b00eb66e35053964ee6
- SHA512 0d61f4704928abe94410ab8565edc0c5165ade76ca66112aa9ed937bfb50bdd05bb86258053f92416421dc3547624ae084c71894ee07e42cb16981efd1689c2d
- SSDEEP 24576:B/2dLSZMTI3nXseJzjkxzpVP5gJkR2N9XhEHmP9:si3HIQk0N9GGl
- TLSH T1F5057CA3BEC1C036E662C531405E87A9D937772117285BCBA3E4472C2F686E35E3E746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3244 jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe 3244 jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_070b0da1870b03d22d47dc706936ce9c4573800bf1a16e391fd92f9e5963e846.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3244
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\2650NSE1\loader[1].js
- Size 206KB
- SHA256 56d9e5848849a67de46c16d76a4a54f25430d1de4dbcd59ecd3e5a3a0b3ae1a6
- MD5 5cd694820c64900e302407fb08a3ca40
- SHA1 fc84fb01e2fa1955228a893a904cb70ba551b181
- SHA512 05a1976b7282f413470371c29516d5e406dd9392ec440ce5278b73320a5b66a1b76264c62cb3846b4e3858c4a8a77fe5a5993a63f75449c8a6a742021c88dfe6
- SSDEEP 6144:ejFx8oI/G53QC+4L+6RNRkXSewtwVJwqn8Mzkh9CnBdrNoq2d8Sr4RB5KnrCaHyP:0A1QTe7
- TLSH T14D24002DDDAC247BA158B4B6C247B2F44ACD32A176FC54C8C9A24C1E73C5BAE643513B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A8BWWIVW\gtm[1].js
- Size 617KB
- SHA256 dd2636b0c02f4a49ee9334935293970f98de71cbd9861327129c30ad084ee4a6
- MD5 7bb38fe85c2f35789bc4010aba580da9
- SHA1 6299a5abc5eeb76985121384eab80a7dd75b8817
- SHA512 aa48d829db4db0cc5bfb4707c5830e7d081c0d8da2b2429168e600fc3960f0e4984bcbef82c850307c7166c4481edf3083eef3c2d567dfe69bee842b370b3e7b
- SSDEEP 6144:f6hLlnMeu35YuqQmKZ+eoyjhswogCnfFABQaVSEc9vsEYGbgEJx3Rmh7q2OBGp9T:fTeu3vfhjhiqBrivsEW7EO9E2
- TLSH T1C3D418CEB3C6747683A6B624903F018FA97E24E2B44CD895F189CCD42E3456A6163F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\E8WK4YG5\bat[1].js
- Size 54KB
- SHA256 4bebc12694755bc5edf1d849783992c7d470db7ede2b9cc74fa2dfd246c20aa1
- MD5 5523840e33b09bced0c852bb05f3f5d8
- SHA1 cfad993be90be3191d8214546cd15b0712350802
- SHA512 a3cea6e185a0c92d8c2265ef404a4a5abf0148d18c4d70c563603e8d9c2c7aa7d749f0649fcab87d02db79e6d0cb39b8095233a6c7975581195edfc7e47e2f14
- SSDEEP 768:YcMOGhicg/yNIh5HQm3mP1koLQBd1f6ybGVGOjJVuO1:TMOGkcgIE36LG1f6ybGMyN
- TLSH T1CE430B4333509A7646F9419C786A2903A336570E30BE70EC7A8CF8E5945DE4B7237B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\E8WK4YG5\boot.bcf873[1].js
- Size 159KB
- SHA256 3d2bcdd7456339be3e9af1367655befca8e6291ef8656b2798813c41fe4039a5
- MD5 e65858c02bf984fe162fed4a8e7582ff
- SHA1 9a0c4f4d3222052f1a21797172e92af792b12e0a
- SHA512 69bf946ce5617cc97b8e95cdc7494fea935ab246528abd9507080c7d3f3f12110493ef9600c17b50c17e3c32ed00a5889c2de036d565bf220132dae1bb473ac6
- SSDEEP 3072:dka6cka6oGA2kqw+H1ud0lGMnTxcu8ZWJuDbiTRDUW:dka6cka6hA2dud3YGu8XDbiT1UW
- TLSH T1EAF35A957B91F0B367E75564C02F8002F2B91994BC0C84D8F31EECD168699CA92B7FB9
- MD5 SHA1 SHA512 SSDEEP TLSH