ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 07:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe
Size 1.8MB
Sample261002-jnddjaxy6k
SHA256 ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e
MD5 5466c927b88b5b224ac81820ef34e3ca
SHA1 dd35532d63cb8a28912b1fab19bc6e5df24cb546
SHA512 76b517a117e9450ddcd7e74131ba71fa5db26d1eadc6afa4face19248c54e20cee3d685427f412cf6543f764640465efaa15f48b7622d00dc45bf9891abb4f42
SSDEEP 24576:1Yg2xVbqMbUFqjOb/BPSr0JS0msGKUBaZQHBxvAYCZjawZbgfYX1Sc:QYBZS7sGKUPxhCZewZZX1S
TLSH
T17F954B03B5C5943BD0721F375C67E9DC6A3B7D202E15AD1B2EA43E0E0E396416D3EA26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_ec43ebff0f9b824f9220be9c02a81dcf9a8a9883bbb701fb040d44c9e7adb39e.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:2600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2600-0-0x0000000000579000-0x000000000057A000-memory.dmp

Download

memory/2600-1-0x0000000000400000-0x00000000005DA000-memory.dmp

Download

memory/2600-2-0x0000000000400000-0x00000000005DA000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads