Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 06:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe
- Size 36KB
- Sample261002-hbdcbss13l
- SHA256 87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577
- MD5 1196d78c654aa2e9ca3cb59df39cc91c
- SHA1 784e5516d02c5552ce6eb6a976bf52cc9a73ab70
- SHA512 27efb2025234a8f953f072091e568f2de8308377ee6e42722e7200da1aac6cbe7a3e476f037a18a6108fa4719aaf984d13eef3da50ad4c6e4ff2c2b2da39d38e
- SSDEEP 384:HoNSZjkHAp/ktZrXu9I4i96uHk9F3iXt81/yLBaeg8utcUs:I+jmApoZr+9I4i96uHsy9816LBAcUs
- TLSH T10EF24C0AB9DDAB70C400C2B5271ADEBD967BBC333A5144A7DB40DE5CAC7DB94990834D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3272 jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_87c78afc3e24055f110538cd0b97615222da67e495dddd75bdd1e0ada5eb3577.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3272