Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 16:31
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 369KB
- Sample261009-t1d6pscf45
- SHA256 410faf9f84d4c7eb19918b7ab971f6fe73e423d13410b8407ee010369a62b555
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Win32.Generic.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3112-0-0x0000000000400000-0x0000000000517000-memory.dmp
memory/3112-33-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-36-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-34-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-35-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-31-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-56-0x00000000025E0000-0x00000000025E1000-memory.dmp
memory/3112-61-0x00000000025B0000-0x00000000025B1000-memory.dmp
memory/3112-60-0x0000000002590000-0x0000000002591000-memory.dmp
memory/3112-59-0x0000000002560000-0x0000000002561000-memory.dmp
memory/3112-58-0x0000000002540000-0x0000000002541000-memory.dmp
memory/3112-55-0x00000000025F0000-0x00000000025F1000-memory.dmp
memory/3112-52-0x0000000002580000-0x0000000002581000-memory.dmp
memory/3112-51-0x0000000002550000-0x0000000002551000-memory.dmp
memory/3112-49-0x0000000002510000-0x0000000002511000-memory.dmp
memory/3112-48-0x0000000002520000-0x0000000002521000-memory.dmp
memory/3112-62-0x00000000025D0000-0x00000000025D1000-memory.dmp
memory/3112-47-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-46-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-45-0x0000000002420000-0x0000000002421000-memory.dmp
memory/3112-44-0x0000000002430000-0x0000000002431000-memory.dmp
memory/3112-42-0x0000000000820000-0x0000000000821000-memory.dmp
memory/3112-41-0x0000000000800000-0x0000000000801000-memory.dmp
memory/3112-57-0x0000000002600000-0x0000000002601000-memory.dmp
memory/3112-54-0x00000000025C0000-0x00000000025C1000-memory.dmp
memory/3112-53-0x00000000025A0000-0x00000000025A1000-memory.dmp
memory/3112-50-0x0000000002530000-0x0000000002531000-memory.dmp
memory/3112-43-0x00000000024C0000-0x00000000024C1000-memory.dmp
memory/3112-40-0x00000000024B0000-0x00000000024B1000-memory.dmp
memory/3112-29-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-30-0x0000000000830000-0x0000000000831000-memory.dmp
memory/3112-28-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-25-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-24-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-23-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-22-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-21-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-20-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-16-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-18-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-17-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-15-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-13-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-12-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-37-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3112-11-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-10-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-8-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-7-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-3-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-2-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-32-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-26-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-27-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-19-0x00000000024F0000-0x00000000024F1000-memory.dmp
memory/3112-14-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-9-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-5-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-6-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-4-0x0000000002500000-0x0000000002501000-memory.dmp
memory/3112-1-0x00000000024A0000-0x00000000024AD000-memory.dmp
memory/3112-68-0x0000000000400000-0x0000000000517000-memory.dmp
memory/5032-63-0x0000000000400000-0x0000000000409000-memory.dmp
memory/5032-66-0x0000000000400000-0x0000000000408960-memory.dmp