Analysis
- max time kernel
150s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
- Size 1.0MB
- Sample260930-pgssjawhrd
- SHA256 6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911
- MD5 d70c08c1ed01c0ce8ce890e58acbbdf0
- SHA1 c17e1a0985e612e6a8326b83140c5256374624dc
- SHA512 039e2d5f87caace86de5606253ab5e99916a8564dba7c4cd09247eab683506f3011a7b86e364a03a0178c840d4b8675c171d9413f77e59dc4bc0c8a3948dd429
- SSDEEP 24576:o0jGeeATg3gXSOvvxM1m359Ty37cAthGn5n/5Mz3gqTL6grFTEAXCJK:FOLd1/7cAthGn5nRMxTfFTEmC
- TLSH T17A259E123394561DD771133D8CAECB56A438A6513EB44BBF761AFB6D093820AD03AFC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2420 jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe 2420 jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_6ca11977a650d39558fa1e36aaf5d4e60af8ebe7da88e6bfd80112760615d911.exe"1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2420
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\bootstrap_24168.html
- Size 156B
- SHA256 f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
- MD5 1ea9e5b417811379e874ad4870d5c51a
- SHA1 a4bd01f828454f3619a815dbe5423b181ec4051c
- SHA512 965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa
- TLSH T1BEC08C745B4A6A40413810C4701FC1482A2931C46823E9003189D2800A2537EE323EDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\css\main.css
- Size 5KB
- SHA256 2e6dd307b58b6eab1ff4a51c5d532e2050de590deb80e3fc62cd2daefbd55393
- MD5 224ce27420b9adf4491edadb3bc4ccda
- SHA1 91d7a7984288713e8b82b1ec5ff36a7de8e8633c
- SHA512 e28ce17f9dc7a730e95c0d1a6e50d08c4c4704bccee4bd396ebead971e55c75b2b1f26fd38e1749a3a468b04c1b52cffe8dba6da6ae45505f7cc50d098967600
- SSDEEP 48:DNK/BEX9mnoy7PyFlckBOLW8K3/WozafVVwvJbOLLuCxSoGhrN4oOh3o3o5Q9FHf:uO0oYPy4HZEzavGCu0+c1apTs9CLJH
- TLSH T119B15122F61C6C0BA26EB69173712FE6CF21805BA257167CF2BE7864D2DC51C17729C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\css\sdk-ui\progress-bar.css
- Size 506B
- SHA256 974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
- MD5 5335f1c12201b5f7cf5f8b4f5692e3d1
- SHA1 13807a10369f7ff9ab3f9aba18135bccb98bec2d
- SHA512 0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df
- TLSH T1BCF059608D74604DF146BB3A37F4A6742E299089950FCB283EEFF021D3C275C24261C1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\BG1.png
- Size 6KB
- SHA256 aa9c26e67a11beb0fbcbd569779f421079224ac8a3ff29251c0f8eae3e562a8d
- MD5 d2a826cfb8e441ebdead29bb0e1d1ed7
- SHA1 b75f295cdf11977e5b2d74fcfddede5a82f59c06
- SHA512 c8144812b9a9ce124bc1dae7ece948c042369b827695ef7f0916490568d32d37b19a91f6ec3b82fdbb9106539f6eda31dc9fdc657e9dc025b8f8aaac31604b04
- SSDEEP 192:d5Gy2gCZ18WOiWIFqvHzqON7ykHq704UzKFXK3KSKGKXPKS:3Gyk8ZiWsqvTqOl9HqoBOkpXsPJ
- TLSH T13CD15B0B2779B885FE4127E4CBB79B8661560C4187054AE982933843FCF2844ABB1BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\BG2.png
- Size 5KB
- SHA256 2c845e3e3c1f48c0867bd39e39f5f81b114fe0d6f51302adb0f1231a372cbcda
- MD5 3ddb3f3052989498efba386b8a0c21d6
- SHA1 9d66abc2ff7abb3282f3303a85de97d13811eb62
- SHA512 ee5eca9e2ce4baa967559326e313c84ff333858e6644f0b7ac805f4c221150cb52199cbd7feb36c9db3bc64a0773be7593027b55869fde9abb7349d3f24ec2bd
- SSDEEP 96:O0jFpUYzbv2jBpWnRhknG4BdyxUBwntPoQ5PpiL3v5ftCqFLliWorNuIMvZ0:OmVbv2jBpWnbknG4ryx0wtPoWAvBVLlC
- TLSH T1A0B1191706157946834BCCB97DE963304250B24D2CBEDB2F458D6CBFC206F69235B43A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Close.png
- Size 322B
- SHA256 d78b9e6c8cb83728615c7664d95dd2c3f11afd7bb4c382b0388ace743e2305af
- MD5 5b97212a9d8ad0865531c4941e20bde6
- SHA1 61a0c546e8c2ac403ac2dc20587173c8e1418ffe
- SHA512 5ef7b48c1a543b370b9957a20821f802f5578bda83a4aa4ab6a8cb47d465da31fee9b2de709a439245d8526b337c35c0738f2f7ce6122da9e9600d25a3f84ab5
- TLSH T1B0E07DD59884B87195EE87F34680451CC4B196E0BCA1852CDC86E823792D0254054103
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Color_Button.png
- Size 592B
- SHA256 371e00281023b79884d559b67cc2db529da70c295dde53b812aaddb6181d73fd
- MD5 499b602442514ccf3794f01c83909eca
- SHA1 e1ee94a95c6690be69cc6215b8defcdc30a19d5c
- SHA512 3946c5262cdc535fb9a928282216c59cf1a1fe349bded69086864cde2de2465b6a7d6425f9fb988c150d2bcc9491471f4930aea9397297e2e07d42e786241e08
- TLSH T1FDF002BF2C05E191D1A6C9736B804050AC260174073A83F46085B81422F2FA8E49D68B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Gray_Button.png
- Size 291B
- SHA256 96c2f3a633fb04207b27caa7e391372d968728e6ae9eee71908dc7c9d8218048
- MD5 257b6acbb516ebf9b81d982e415ffad2
- SHA1 132f7b288412911f0c7313e0e9c7da8294126791
- SHA512 624650a5437bb30c076e2f370e123f22b5e80b4b4f97357504345338031afcbf09630b84373dfedc3a47b4322e33b92e72e683f69c9a7a47afed97bc3a9a7536
- TLSH T116D0E7DF2570CDA4F3EF4C72509A10158CB31A474193050C2553D810D54304440E524F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\Prod_Circle.png
- Size 1KB
- SHA256 39ec7a68971d5536e4c4d45e91943548b4ede65a42fd7ff3d89a03ac998d5538
- MD5 239e096a673ac6c2adfd34f78aa6234d
- SHA1 dc2c5fe032a777171cdd08cd8de040503b59f642
- SHA512 5c21d549d434844798655e40e331a6b03ff7d5d0f1f8c698395fd334f58ae791fafb361eb96566e0184e52a2fb59da7d6ab3b62a59e8e6b5b4d4d8869291618a
- TLSH T135410AC22DE14C18809D73F67167DE0869A1C201A8D068ED48E2DB74AB7BD1CD5D7701
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\ProgressBar.png
- Size 469B
- SHA256 c58d4eb376e7a08421deb20d039465db89bc26814425ed68df97df873d86cff5
- MD5 48b1d53e7b743bc1dc9ed2ab24d3e8d3
- SHA1 798a0b8be166adadd45f70b38bb44d2bf9baf450
- SHA512 380acd30ef72f786d51e63885d295b02870ac7b0bb54712f3be488e5a38107902ba0137ba02584f1d974276325638dc9342d7edfd5cbbce80c1b8133745941b1
- TLSH T1B3F0D4C2220887695010A32276E2C474ECAB68C787819110B97E07143770E4FD7B824F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\ProgressBar_Element.png
- Size 246B
- SHA256 e8458a7e0d987fb72034de02df8562cc0c566622eeeaf9d73899fbe7cf46d793
- MD5 001862156596834b18af80203241ab75
- SHA1 43786b8f6a46f0b94853f5cc1d5e20202c1ac311
- SHA512 5dcdf43fd3aef06bf6c959cfdbe5ff704ed7330697cf36f2b07e0538b84d4ce8d44defbdf8d7f9b0b148229e39c2a61b0290a9e8d4016072ad32ea83fba1fdfc
- TLSH T176D095C567604C35C63713F557949033765506C2392185781873D457265030C4DF8217
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\images\loader.gif
- Size 21KB
- SHA256 6c7d0d5402ebcf34cb6280473b4dac5966aae2a4bdadf80c796245663e2d9b55
- MD5 360281e85620142c3329848262da263d
- SHA1 032ae1e422af859d78d172e918573fb0f55318de
- SHA512 48ea37754839abce73898d29c6cb1ede20ac980dcd0b8c0f1274a690ea0bb44659129aba7581bd473ab7a735b7b9d08d6d041973bced4fe3fc0b70b3a73ec2a6
- SSDEEP 384:bLvsO4z/CTlUME8n9baAJBws8Pl//S76C8V7CJJcfb+ZvMvv:vsO4z/1MEo9l7d76h1b+ZUvv
- TLSH T1EBA2CF03D4236454E13FA9FAE711550EAE12D3F3D5211F3A8B10A4A1BBB246E3188BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ish240750875\locale\EN.locale
- Size 1KB
- SHA256 ea60de0c44dbb70d9d9e6c6b1d499899f05f2132511f0a65be801de3f1294d89
- MD5 77765c009c5ab6d2f13961315751f645
- SHA1 1c118a0e3557bd545fccce81a38ff29b51675dad
- SHA512 d5661b1d4f8ce8e30b396ee1077715e7d66483d6297ac813a5ac3f761dd87117166c64245edcad6e59aeb8d685ce2bd60a9216c19596c24646fc4aca23992e7a
- TLSH T17E31129E9301D3FDA3016A63300F66E2A54658BF062962205CBF806C667AB12D1FF7D3
- MD5 SHA1 SHA512 TLSH