9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe
Size 1018KB
Sample260930-pfbgvswhmd
SHA256 9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4
MD5 e53b8d74fe2c164c055aee66071d865c
SHA1 0cefb61e99063c7823d2dea42a369c7baeb61ebf
SHA512 848482e4a7c41d0da8d8d6a8c6a11c88160b7d965ffdaca676f6bae1205463e71f3673e76c750a8f99586fe3d5fc40ca2316630dfd8d08e4e01b0c1f101893ec
SSDEEP 24576:33YHNZUtV5ufocxa+wendLn9XhQJgMTceUq:WN6rUPM+wenhn9XhQeMT
TLSH
T1DB258D0A5088B4A6F94C3575C4ABBF964DC0FE856BE25C0F78F60FDDA4A350812967B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5600	jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe
5600	jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_9bd93949e60e161f100a44bc401bb66516af9fd2144e5606e77e9b6d1cf48db4.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bootstrap_10314.html

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\bootstrap_10314.html
Size 156B
SHA256 f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
MD5 1ea9e5b417811379e874ad4870d5c51a
SHA1 a4bd01f828454f3619a815dbe5423b181ec4051c
SHA512 965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa
TLSH
T1BEC08C745B4A6A40413810C4701FC1482A2931C46823E9003189D2800A2537EE323EDA
MD5 SHA1 SHA512 TLSH

Submit Download

main.css

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\css\main.css
Size 3KB
SHA256 03e4642a7f23a5fab3e127a5ba91e3d829fa5e76545b1a30cb3f3d57f569d249
MD5 7013f5a38b7e5df13729294ddf474d99
SHA1 06423dd44e8a1b7550d80f5942fd72a372f8c77c
SHA512 a9802809f020bd990d9c1bd075b7e1a9ecb4660687b51c5b0a256075972dc5f4fc434ad209602fdec46c753a54bf1b6d25db0e778d35dc9fdf8afb16ab365d1d
TLSH
T1A2818112F6982C0AE269F654B3B11FE6DE150057A2138AECF9BE7860C1CD24C67B15C3
MD5 SHA1 SHA512 TLSH

Submit Download

progress-bar.css

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\css\sdk-ui\progress-bar.css
Size 506B
SHA256 974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
MD5 5335f1c12201b5f7cf5f8b4f5692e3d1
SHA1 13807a10369f7ff9ab3f9aba18135bccb98bec2d
SHA512 0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df
TLSH
T1BCF059608D74604DF146BB3A37F4A6742E299089950FCB283EEFF021D3C275C24261C1
MD5 SHA1 SHA512 TLSH

Submit Download

BG.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\BG.png
Size 16KB
SHA256 a15c437dbbab21947446ad9d39fb221b1d900fe6e716b412a144fac3044acfee
MD5 612a87dd7da6eaec11e680a5a6fdcf6e
SHA1 55270a0973a98ac13c805a7ec4f018c13348f4ca
SHA512 4b58b03368125b780878d97e872ace5866e284b822aa1c9d5556e30b09a501bc2257ccf277de61746d79271e7c003664e7ff537866d072e9a0cf2788127111c3
SSDEEP 384:lMfTq8CXNIgrmVpMw6UGqWq6vtNxbfzDQhDuFNNS:lMfW8CbKNrSVNxbf3S
TLSH
T11E72B06E882FB7005F8D453B77B9C930418DDCB10F06E5D8965398A109ACBE9543FED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Close.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\Close.png
Size 925B
SHA256 ea7984a4af75179bd5a42e56bcdae7d06cb89d03d814a0168f8a223bebbed058
MD5 249e564a2ac708877c7fbe9a73ed6b19
SHA1 65b20a84f59d70b63bb3198b394fd9577741a317
SHA512 86595185632af4fb7ae7b425eb2fd67818ffd2f079da4b236754a74dfc1d1e1e3b5904f122c6fa5e592e674d7c5d38c16be52fa362bc78773f90bf7ae6768222
TLSH
T1CC11B7D7F27E544B4DD315F09D0AE092D511E0E9092EC30184AE0B5637F6F28415DED5
MD5 SHA1 SHA512 TLSH

Submit Download

Color_Button.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\Color_Button.png
Size 1KB
SHA256 8b0bf039e841739da7555d8b2348b02111b9a00cca8f654ae73953778155f638
MD5 233e3ecaf8b6f0a9f82ca79ccd1788a1
SHA1 69775c8479f3ec49f8c3817305320a208349938b
SHA512 099f1becf1176d4d0abc7887332ebc6a19ea4631a8c0f93a6c5ccbd35bae62621dc3090aa8ae78d5d8a42a12f0e8ab8458a60fe66c1b9fdc5b56d929dc0d96e9
TLSH
T1A221C65E742C3CD8A12317AB65D8ED45A5DE8AC1DCA398ED3D28D04A17E494ED8CC9C2
MD5 SHA1 SHA512 TLSH

Submit Download

Games_Pics.jpg

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\Games_Pics.jpg
Size 12KB
SHA256 1ca7924ab528b00d5508b442f15288043448a63f2860307253019d901f4f9d82
MD5 3d508e41c8e160e70b4f2e1a9a66b1bc
SHA1 900e64092e3849cf54bf61957e78d4d78faf612f
SHA512 40b0a138df819c09d8fd2b551cd4e5ee02480a6630f77676e52e4b48587447fc323d4d95553e6309e43f4abac9fb0a7f9e91632be50cd878fc870e395f0c6547
SSDEEP 192:qmkFS56M3vI5kzM84pP+ITQf9RMNNuMiAQq1w2JDKobI6AgZW+cHo6nC4p4hTT:qmN55fIG5402SC+C1w2JDKo0jIazpcTT
TLSH
T13042C0DBEC1B5883C16896B02B24C0310B08F5AA86760F3D99E6D24D11FEF4A44BDB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Gray_Button.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\Gray_Button.png
Size 1KB
SHA256 d36de61d654cccf61b8767923efaecfea8b79e013aa0d0d1b832d23b9ab811ea
MD5 35800b05c4334c3a5cddf4260ac9d4b9
SHA1 54affc5d79378b688b64171c03434abe83b5c6c6
SHA512 76eeb5bb528949fcc5baa327463459d99991823c2ab5aa82366c797d74ac0db9b5bb5b8d5a55ee73990e0c1b0c3074f9ad09ccbf4ac19ec4737dd97d8687ba7f
TLSH
T10521F9DBE5326A49C837D710F7E8C83C8B70B6C08A073B685C09AE81655ACC883EC113
MD5 SHA1 SHA512 TLSH

Submit Download

Progress.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\Progress.png
Size 1KB
SHA256 85f2a178f1b32d85a162b68590b526c50ce70e82e04c508597476da67b962856
MD5 6e729d132f975194c6d3975cad7d5ee4
SHA1 ca7d67a9b6a06d7ac20099eecec71c23ef85abd8
SHA512 60c71988687d2df96f3c9b48fe5ae7ca92821f887dacedb33c8f611d199513253834f387c12d0452548ace076aebc299b0e5494c47caf2219009c0b256ba8747
TLSH
T1BF211A12B80E20B5C86564E3E37D2588E473E78ABFBE4CCE5581E106F8A5B8400B4DCB
MD5 SHA1 SHA512 TLSH

Submit Download

ProgressBar.png

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\ProgressBar.png
Size 477B
SHA256 fa8bfed0f1e98d212938e307160d1c5b68f134f67ea0826b9f75f2284be9e2f2
MD5 830234f26fce01833c8f74f1829d7717
SHA1 38207d8cbf96b4e1a7d6182b7da4b25c31e538dc
SHA512 f4ab75c710c1eb287002a6640e0ec4c5061d2e921a49d1b5b37be5e83c217d77536a5754cca3b57d446c663b402377280c283d99d6b6667eaa7ff38b8a2e49e2
TLSH
T13BF0DCDFB2C14A36DFD66DF47C1430A1D3A98A40000269F0E9C9A27A4770E0A6A56EC3
MD5 SHA1 SHA512 TLSH

Submit Download

loader.gif

Path C:\Users\Admin\AppData\Local\Temp\ish240745937\images\loader.gif
Size 21KB
SHA256 6c7d0d5402ebcf34cb6280473b4dac5966aae2a4bdadf80c796245663e2d9b55
MD5 360281e85620142c3329848262da263d
SHA1 032ae1e422af859d78d172e918573fb0f55318de
SHA512 48ea37754839abce73898d29c6cb1ede20ac980dcd0b8c0f1274a690ea0bb44659129aba7581bd473ab7a735b7b9d08d6d041973bced4fe3fc0b70b3a73ec2a6
SSDEEP 384:bLvsO4z/CTlUME8n9baAJBws8Pl//S76C8V7CJJcfb+ZvMvv:vsO4z/1MEo9l7d76h1b+ZUvv
TLSH
T1EBA2CF03D4236454E13FA9FAE711550EAE12D3F3D5211F3A8B10A4A1BBB246E3188BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5600-0-0x00000000004CC000-0x00000000004CD000-memory.dmp

Download

memory/5600-157-0x0000000000400000-0x0000000000506000-memory.dmp

Download

memory/5600-1-0x0000000000400000-0x0000000000506000-memory.dmp

Download

memory/5600-164-0x00000000004CC000-0x00000000004CD000-memory.dmp

Download

memory/5600-165-0x0000000000400000-0x0000000000506000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads