Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe
- Size 4.7MB
- Sample260930-panj8sef79
- SHA256 da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6
- MD5 84283aa593cdc3ceddb8fd40c20a0f4e
- SHA1 4e14eca305c0f337f48863c4aa5e120f365b1ee4
- SHA512 818deadff33e109b2b960371914d2307221f4509dba416bf6e226c29b7bec9d0a78ba99b37c0089e4e7b8ff13f6f17827f585fde389efaac758c806c19147915
- SSDEEP 12288:uJc+n6tj/XrJklre9w5qRjMJ7lmQ5cwXFLXWjhhe2kUMJoTiwFGGNtjvaevmDGyW:VAre9w0WJ8vwVLaheHuvGGNtjm3y4M
- TLSH T131368C21BFD1C07BD2B2D271046A8276E87775604B2899C7B3D40B2D2F706D1AE3DB5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1576 jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe 1576 jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_da6f82c0c2acb73d225e5753f2d17f6fbd036bdde3336c9d38f7fca8edaa15f6.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1576
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0LTBB212\f0e540abd02c401a8af5ab8ce8e3eaf1.min[1].js
- Size 2KB
- SHA256 af4cfb8313f6b6f2f454f7a255edf7ebab666cddaeaa30522ce3aff4d5b46cbc
- MD5 12e8df6aabfbc6cf5ec66a8f096b4374
- SHA1 3b24ffe74547aa686a63769e2138ee2713bca32e
- SHA512 68c210a29b250859bfc13f07e1b118fb757cf7bdbf3eecf623c89c1d2882bd85ae03174bf6159847c9b76816bf85851be45c49529194780c2f73f59ec16126e9
- TLSH T11B51DA987FCEBC7707A32B31007F6809B2777E595446C680561AF9A01CA1D5D375F90C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\0LTBB212\loader[1].js
- Size 206KB
- SHA256 56d9e5848849a67de46c16d76a4a54f25430d1de4dbcd59ecd3e5a3a0b3ae1a6
- MD5 5cd694820c64900e302407fb08a3ca40
- SHA1 fc84fb01e2fa1955228a893a904cb70ba551b181
- SHA512 05a1976b7282f413470371c29516d5e406dd9392ec440ce5278b73320a5b66a1b76264c62cb3846b4e3858c4a8a77fe5a5993a63f75449c8a6a742021c88dfe6
- SSDEEP 6144:ejFx8oI/G53QC+4L+6RNRkXSewtwVJwqn8Mzkh9CnBdrNoq2d8Sr4RB5KnrCaHyP:0A1QTe7
- TLSH T14D24002DDDAC247BA158B4B6C247B2F44ACD32A176FC54C8C9A24C1E73C5BAE643513B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\60SJCADA\gtm[1].js
- Size 617KB
- SHA256 2f88f360bc4f86b95cf7ddf896562f9f35b023e7540c73e8d1d742364df982d5
- MD5 2e98d06e7e64faf0ca8faf74864b4295
- SHA1 d174a286c6c8101c8091c4bfa36612b75d02bbe7
- SHA512 2c5529f43271e0f4c13cd6b6996f9c36d19087671110508cc51980af1e51693485a7d836766a0238b0c32c675e93c88fac86703dc1acbf05dd49f1d98c6c0fc9
- SSDEEP 6144:f6hLlnMeue5YuqQmKZ+eoyjhswogCnfFABQaVSEc9vsEYGbgEJx3Rmh7q2OBGp9T:fTeuevfhjhiqBrivsEW7EO9E2
- TLSH T1A4D418CEB3C6747683A6B624903F018FA97E24E2B44CD895F189CCD42E3456A6163F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\S1NI6S3Y\bat[1].js
- Size 54KB
- SHA256 4bebc12694755bc5edf1d849783992c7d470db7ede2b9cc74fa2dfd246c20aa1
- MD5 5523840e33b09bced0c852bb05f3f5d8
- SHA1 cfad993be90be3191d8214546cd15b0712350802
- SHA512 a3cea6e185a0c92d8c2265ef404a4a5abf0148d18c4d70c563603e8d9c2c7aa7d749f0649fcab87d02db79e6d0cb39b8095233a6c7975581195edfc7e47e2f14
- SSDEEP 768:YcMOGhicg/yNIh5HQm3mP1koLQBd1f6ybGVGOjJVuO1:TMOGkcgIE36LG1f6ybGMyN
- TLSH T1CE430B4333509A7646F9419C786A2903A336570E30BE70EC7A8CF8E5945DE4B7237B7A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VLL8VNTJ\boot.bcf873[1].js
- Size 159KB
- SHA256 3d2bcdd7456339be3e9af1367655befca8e6291ef8656b2798813c41fe4039a5
- MD5 e65858c02bf984fe162fed4a8e7582ff
- SHA1 9a0c4f4d3222052f1a21797172e92af792b12e0a
- SHA512 69bf946ce5617cc97b8e95cdc7494fea935ab246528abd9507080c7d3f3f12110493ef9600c17b50c17e3c32ed00a5889c2de036d565bf220132dae1bb473ac6
- SSDEEP 3072:dka6cka6oGA2kqw+H1ud0lGMnTxcu8ZWJuDbiTRDUW:dka6cka6hA2dud3YGu8XDbiT1UW
- TLSH T1EAF35A957B91F0B367E75564C02F8002F2B91994BC0C84D8F31EECD168699CA92B7FB9
- MD5 SHA1 SHA512 SSDEEP TLSH