Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 12:18

General

  • Target
    jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
  • Size 1.0MB
  • Sample260930-pgssjawhrd
  • SHA256 6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        bootstrap_24168.html

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\bootstrap_24168.html
        • Size 156B
        • SHA256 f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
        • MD5 SHA1 SHA512 TLSH

        main.css

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\css\main.css
        • Size 5KB
        • SHA256 2e6dd307b58b6eab1ff4a51c5d532e2050de590deb80e3fc62cd2daefbd55393
        • MD5 SHA1 SHA512 SSDEEP TLSH

        progress-bar.css

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\css\sdk-ui\progress-bar.css
        • Size 506B
        • SHA256 974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
        • MD5 SHA1 SHA512 TLSH

        BG1.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\BG1.png
        • Size 6KB
        • SHA256 aa9c26e67a11beb0fbcbd569779f421079224ac8a3ff29251c0f8eae3e562a8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BG2.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\BG2.png
        • Size 5KB
        • SHA256 2c845e3e3c1f48c0867bd39e39f5f81b114fe0d6f51302adb0f1231a372cbcda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Close.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Close.png
        • Size 322B
        • SHA256 d78b9e6c8cb83728615c7664d95dd2c3f11afd7bb4c382b0388ace743e2305af
        • MD5 SHA1 SHA512 TLSH

        Color_Button.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Color_Button.png
        • Size 592B
        • SHA256 371e00281023b79884d559b67cc2db529da70c295dde53b812aaddb6181d73fd
        • MD5 SHA1 SHA512 TLSH

        Gray_Button.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Gray_Button.png
        • Size 291B
        • SHA256 96c2f3a633fb04207b27caa7e391372d968728e6ae9eee71908dc7c9d8218048
        • MD5 SHA1 SHA512 TLSH

        Prod_Circle.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Prod_Circle.png
        • Size 1KB
        • SHA256 39ec7a68971d5536e4c4d45e91943548b4ede65a42fd7ff3d89a03ac998d5538
        • MD5 SHA1 SHA512 TLSH

        ProgressBar.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\ProgressBar.png
        • Size 469B
        • SHA256 c58d4eb376e7a08421deb20d039465db89bc26814425ed68df97df873d86cff5
        • MD5 SHA1 SHA512 TLSH

        ProgressBar_Element.png

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\ProgressBar_Element.png
        • Size 246B
        • SHA256 e8458a7e0d987fb72034de02df8562cc0c566622eeeaf9d73899fbe7cf46d793
        • MD5 SHA1 SHA512 TLSH

        loader.gif

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\loader.gif
        • Size 21KB
        • SHA256 6c7d0d5402ebcf34cb6280473b4dac5966aae2a4bdadf80c796245663e2d9b55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        EN.locale

        • Path C:\Users\Admin\AppData\Local\Temp\ish240750875\locale\EN.locale
        • Size 1KB
        • SHA256 ea60de0c44dbb70d9d9e6c6b1d499899f05f2132511f0a65be801de3f1294d89
        • MD5 SHA1 SHA512 TLSH

        memory/2420-0-0x00000000004CF000-0x00000000004D0000-memory.dmp

        memory/2420-173-0x0000000000400000-0x0000000000508000-memory.dmp

        memory/2420-1-0x0000000000400000-0x0000000000508000-memory.dmp

        memory/2420-181-0x00000000004CF000-0x00000000004D0000-memory.dmp

        memory/2420-182-0x0000000000400000-0x0000000000508000-memory.dmp