Analysis

  • max time kernel
    148s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 11:50

General

  • Target
    jaffacakes118_edb4fe87fea1a02c0f081dee1dd499e79a11f981f9991089308d9b5b01e01e76.exe
  • Size 1.4MB
  • Sample261002-nz289azdpc
  • SHA256 edb4fe87fea1a02c0f081dee1dd499e79a11f981f9991089308d9b5b01e01e76
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_edb4fe87fea1a02c0f081dee1dd499e79a11f981f9991089308d9b5b01e01e76.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_edb4fe87fea1a02c0f081dee1dd499e79a11f981f9991089308d9b5b01e01e76.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4948
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 2276
      2⤵
      • Program crash
      PID:4428
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4948 -ip 4948
    1⤵
      PID:3812
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:3416

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            style-ie7.css

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style-ie7.css
            • Size 904B
            • SHA256 a7b66e20140881d7b57009fc22647b005c0a94515d66af57367302a34227c66b
            • MD5 SHA1 SHA512 TLSH

            style.css

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\css\style.css
            • Size 7KB
            • SHA256 36898487c21daf59cf0b6f1437a109717c9890d3ea815c962a4881f99783ffa9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            AgreementScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\AgreementScreen.jpg
            • Size 9KB
            • SHA256 1f4b39dda7a2c4181c7164cdd35e60d04cd232208613bf2bef99b9450ff3915b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CatalogueScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\CatalogueScreen.jpg
            • Size 18KB
            • SHA256 621cdb5117b14db8804bc9fd2472b00c0d809a97975b443400a0b901d7452910
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DownloadsScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\DownloadsScreen.jpg
            • Size 15KB
            • SHA256 5cda60d4abb1d57b6f10e0d91d4f9a8100d95aaa1ac118d218f981b71c6154c1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            FeaturesScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\FeaturesScreen.jpg
            • Size 12KB
            • SHA256 3e5faa57bfc6def55ae8052f5aa8efc258a3ad8f3cb9b40691a8b565071fba04
            • MD5 SHA1 SHA512 SSDEEP TLSH

            InstallScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\InstallScreen.jpg
            • Size 16KB
            • SHA256 5808ddc486e21f939ef8613b5793fa64f2c2491a76455dfb1a184ef04c04292b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Marker.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\Marker.jpg
            • Size 771B
            • SHA256 99793d62273ab6b91ec41fb4fa9ff08f91661a3ddb85fa128e1724f1572d7134
            • MD5 SHA1 SHA512 TLSH

            MediaLibraryScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaLibraryScreen.jpg
            • Size 15KB
            • SHA256 d1c443a32e41d0e54b26f3d775342ccd963892c82a8ef651280f2d8d4612566e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            MediaPlayerScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\MediaPlayerScreen.jpg
            • Size 10KB
            • SHA256 b5beb00448cd2f9bb8c148ddaa20f97474a41fb965b60bb5ac3181924c1e5e27
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SearchScreen.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\SearchScreen.jpg
            • Size 24KB
            • SHA256 459ffe46bd712ad7300627dc062e97b25902d0fc1945c1002f2ddd29b383f64d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TabBg.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\TabBg.jpg
            • Size 1KB
            • SHA256 6ff2ede122e7a8c88cddf2074ef64a191501b8cdb2d007a7acbf9fdcbe1b15a2
            • MD5 SHA1 SHA512 TLSH

            babylonlogoleft.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\babylonlogoleft.jpg
            • Size 2KB
            • SHA256 709bc580222dd517d80492ffe7e2289bbf748fc6c5e2504c9440731b3e96faa1
            • MD5 SHA1 SHA512 TLSH

            babylonlogoupper.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\babylonlogoupper.jpg
            • Size 4KB
            • SHA256 18002db0aa781edfa93608ae493c0bc7a558f84ecde69da692e9e56f19c0c757
            • MD5 SHA1 SHA512 SSDEEP TLSH

            check.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\check.jpg
            • Size 1KB
            • SHA256 2e19f60efa95f693c0b1a00605df9e4d2ab22bb2b388f828118f5a91396635d2
            • MD5 SHA1 SHA512 TLSH

            finish-flags.png

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\finish-flags.png
            • Size 14KB
            • SHA256 a98567be6cb7f78237862f451d479df10402d6ab7d8f807476fee069efbb66e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            header_cycle_arrows_shape.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\header_cycle_arrows_shape.jpg
            • Size 2KB
            • SHA256 a2c2c1fd5f0273adf862bfdb3d2539e8f278792ea85d70e91ef0b1d1cba1adfa
            • MD5 SHA1 SHA512 TLSH

            installbutton.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\installbutton.jpg
            • Size 367B
            • SHA256 db4a08aca4e4a97db0dd3caed7d660b4f5028597f1583e604a2918b1eaf4dc83
            • MD5 SHA1 SHA512 TLSH

            kaspersky.gif

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\kaspersky.gif
            • Size 4KB
            • SHA256 e0a0d2f03fffdb05f019b5e35869367606f24a00a26739bba825a6efb78bb98e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            loadinfo1.gif

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\loadinfo1.gif
            • Size 6KB
            • SHA256 8e828b825886d6cffcbd968c323287a676586eda096db4eee58957ade5dfcd20
            • MD5 SHA1 SHA512 SSDEEP TLSH

            logo.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\logo.jpg
            • Size 2KB
            • SHA256 e34901a370661bb015b7ebd6d5ce33ae4dbff08f12dfbb65b7d3f8cc48fd288e
            • MD5 SHA1 SHA512 TLSH

            menuBg.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\menuBg.jpg
            • Size 2KB
            • SHA256 35a2ac79c81dfb8c3ccb23713b3ca93d3713542f822aa46f0d63c7b473b11499
            • MD5 SHA1 SHA512 TLSH

            next.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\next.jpg
            • Size 664B
            • SHA256 ecc4d9ba2c50cdecfd3fb4c9089be82ba897857721d394e5c953a7d1d469f885
            • MD5 SHA1 SHA512 TLSH

            start_de.jpg

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img\start_de.jpg
            • Size 1KB
            • SHA256 d3feae909b667e7117cdca18f386fe70cfaf48d99286fa7d66a7157d385d275a
            • MD5 SHA1 SHA512 TLSH

            index.html

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
            • Size 11KB
            • SHA256 88bab1a1be23921fab91a562e9e70c2c3d1259fec36ec45cb494c0ecbf684452
            • MD5 SHA1 SHA512 SSDEEP TLSH

            DD_belatedPNG.js

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\DD_belatedPNG.js
            • Size 5KB
            • SHA256 8c61dcfbc3dda3c82b2bbe977d816ed71cfb98a12545f2b2b1d218178e13b238
            • MD5 SHA1 SHA512 SSDEEP TLSH

            jquery.js

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\jquery.js
            • Size 89KB
            • SHA256 c784376960f3163dc760bc019e72e5fed78203745a5510c69992a39d1d8fe776
            • MD5 SHA1 SHA512 SSDEEP TLSH

            scripts.js

            • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\scripts\scripts.js
            • Size 2KB
            • SHA256 4c7edbc76ee5063dda92a378b41f7d6f4c88489bf6fb9a536794cbfc483e53be
            • MD5 SHA1 SHA512 TLSH

            memory/4948-0-0x0000000000400000-0x0000000000578000-memory.dmp

            memory/4948-1-0x0000000002340000-0x0000000002341000-memory.dmp