Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 17:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe
- Size 4KB
- Sample261009-vybs8shx5l
- SHA256 7ee8c675394b3089aba405e352a36b0a6bafd4ab9e2ffac002d7393f4f8682a4
- MD5 9ef344683c6cb9662d01ae4feab8da2b
- SHA1 67301ec3c755626141dbb6094ede075fb80ec496
- SHA512 869405454056e3bba76c084052ecf316f006650198ffc9f4927da6601a4d61c7fde65dcc857bde25e825222dab4fe799e6c6057a56ac0edc87256389d700ed1b
- SSDEEP 24:e9GSFztEDjl1xvP0vlpXYuwDMlzl4QIBs6IAxn9b2W3aoBP:K0DjlXuPX5DdNIBs6vaW3aop
- TLSH T19491F04369A81921C080CF37214746C5ECAFE53007F2918E97D2599AA4752A7DB2AF4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan-Downloader.Win32.Small.qa.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\fm-2.exe
- Size 2KB
- SHA256 f10677ed8e17e2cfa3e6eb60b8c8b327b6da3866134acaaac9cfe88003001f15
- MD5 e45a43c46312d3cce5651bacc98448fa
- SHA1 2887f53ded5b7dd9cec66a35119482765827ebd1
- SHA512 4565995758a469e4d8f9ff3c579c960eecbc3c6903f36bcfbf0b7db0e036fda210103c07390da08fbb743e5c245c1629464332335e9660cd3a4af9d132e22da9
- TLSH T1C1410ED4A7B6C8D4F3E02F300A75D30F7826FAB5D953E24D14A011180D30B069C76BB6
- MD5 SHA1 SHA512 TLSH