Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 20:38
General
- Target jaffacakes118_Trojan-Dropper.Win32.VB.ahht.exe
- Size 205KB
- Sample261009-zer4bsvx6l
- SHA256 5eba5a8720435dc984ac230f705633deac8052567573ca0ea675382d17be9d26
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.ahht.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.ahht.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.ahht.exeC:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.ahht.exe2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1228-0-0x0000000000400000-0x000000000043A000-memory.dmp
memory/1228-1-0x0000000002280000-0x00000000022C3000-memory.dmp
memory/1228-7-0x0000000002340000-0x0000000002341000-memory.dmp
memory/1228-6-0x0000000002350000-0x0000000002352000-memory.dmp
memory/1228-5-0x0000000002300000-0x0000000002301000-memory.dmp
memory/1228-4-0x00000000006A0000-0x00000000006A1000-memory.dmp
memory/1228-2-0x00000000022E0000-0x00000000022E1000-memory.dmp
memory/1228-3-0x00000000021D0000-0x00000000021D1000-memory.dmp
memory/1228-89-0x00000000031F0000-0x00000000031F1000-memory.dmp
memory/1228-88-0x0000000003200000-0x0000000003201000-memory.dmp
memory/1228-87-0x00000000031D0000-0x00000000031D1000-memory.dmp
memory/1228-86-0x00000000031E0000-0x00000000031E1000-memory.dmp
memory/1228-85-0x00000000031B0000-0x00000000031B1000-memory.dmp
memory/1228-84-0x00000000031C0000-0x00000000031C1000-memory.dmp
memory/1228-83-0x0000000003190000-0x0000000003191000-memory.dmp
memory/1228-81-0x0000000003170000-0x0000000003171000-memory.dmp
memory/1228-80-0x0000000003180000-0x0000000003181000-memory.dmp
memory/1228-79-0x0000000003150000-0x0000000003151000-memory.dmp
memory/1228-95-0x0000000002280000-0x00000000022C3000-memory.dmp
memory/1228-94-0x0000000000400000-0x000000000043A000-memory.dmp
memory/1228-77-0x0000000003130000-0x0000000003131000-memory.dmp
memory/1228-76-0x0000000003140000-0x0000000003141000-memory.dmp
memory/1228-75-0x0000000003110000-0x0000000003111000-memory.dmp
memory/1228-73-0x00000000030F0000-0x00000000030F1000-memory.dmp
memory/1228-71-0x00000000030D0000-0x00000000030D1000-memory.dmp
memory/1228-69-0x00000000030B0000-0x00000000030B1000-memory.dmp
memory/1228-68-0x00000000030C0000-0x00000000030C1000-memory.dmp
memory/1228-67-0x0000000003090000-0x0000000003091000-memory.dmp
memory/1228-66-0x00000000030A0000-0x00000000030A1000-memory.dmp
memory/1228-65-0x0000000003070000-0x0000000003071000-memory.dmp
memory/1228-64-0x0000000003080000-0x0000000003081000-memory.dmp
memory/1228-63-0x0000000003050000-0x0000000003051000-memory.dmp
memory/1228-62-0x0000000003060000-0x0000000003061000-memory.dmp
memory/1228-61-0x0000000003030000-0x0000000003031000-memory.dmp
memory/1228-60-0x0000000003040000-0x0000000003041000-memory.dmp
memory/1228-59-0x0000000003010000-0x0000000003011000-memory.dmp
memory/1228-58-0x0000000003020000-0x0000000003021000-memory.dmp
memory/1228-57-0x0000000002FF0000-0x0000000002FF1000-memory.dmp
memory/1228-56-0x0000000003000000-0x0000000003001000-memory.dmp
memory/1228-55-0x0000000002FD0000-0x0000000002FD1000-memory.dmp
memory/1228-54-0x0000000002FE0000-0x0000000002FE1000-memory.dmp
memory/1228-52-0x0000000002FC0000-0x0000000002FC1000-memory.dmp
memory/1228-51-0x0000000002F90000-0x0000000002F91000-memory.dmp
memory/1228-50-0x0000000002FA0000-0x0000000002FA1000-memory.dmp
memory/1228-48-0x0000000002F80000-0x0000000002F81000-memory.dmp
memory/1228-47-0x0000000002F50000-0x0000000002F51000-memory.dmp
memory/1228-46-0x0000000002F60000-0x0000000002F61000-memory.dmp
memory/1228-45-0x0000000002F30000-0x0000000002F31000-memory.dmp
memory/1228-43-0x0000000002F10000-0x0000000002F11000-memory.dmp
memory/1228-44-0x0000000002F40000-0x0000000002F41000-memory.dmp
memory/1228-42-0x0000000002F20000-0x0000000002F21000-memory.dmp
memory/1228-41-0x0000000002EF0000-0x0000000002EF1000-memory.dmp
memory/1228-39-0x0000000002ED0000-0x0000000002ED1000-memory.dmp
memory/1228-37-0x0000000002EB0000-0x0000000002EB1000-memory.dmp
memory/1228-38-0x0000000002EE0000-0x0000000002EE1000-memory.dmp
memory/1228-35-0x0000000002E90000-0x0000000002E91000-memory.dmp
memory/1228-34-0x0000000002EA0000-0x0000000002EA1000-memory.dmp
memory/1228-33-0x0000000002E70000-0x0000000002E71000-memory.dmp
memory/1228-32-0x0000000002E80000-0x0000000002E81000-memory.dmp
memory/1228-31-0x0000000002E50000-0x0000000002E51000-memory.dmp
memory/1228-30-0x0000000002E60000-0x0000000002E61000-memory.dmp
memory/1228-28-0x0000000002E40000-0x0000000002E41000-memory.dmp
memory/1228-26-0x0000000002E20000-0x0000000002E21000-memory.dmp
memory/1228-25-0x0000000002DF0000-0x0000000002DF1000-memory.dmp
memory/1228-24-0x0000000002E00000-0x0000000002E01000-memory.dmp
memory/1228-23-0x0000000002DD0000-0x0000000002DD1000-memory.dmp
memory/1228-21-0x0000000002DB0000-0x0000000002DB1000-memory.dmp
memory/1228-20-0x0000000002DC0000-0x0000000002DC1000-memory.dmp
memory/1228-19-0x0000000002C80000-0x0000000002C81000-memory.dmp
memory/1228-18-0x0000000002C90000-0x0000000002C91000-memory.dmp
memory/1228-17-0x0000000002C60000-0x0000000002C61000-memory.dmp
memory/1228-15-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/1228-13-0x0000000002370000-0x0000000002371000-memory.dmp
memory/1228-12-0x0000000002320000-0x0000000002321000-memory.dmp
memory/1228-11-0x0000000002310000-0x0000000002311000-memory.dmp
memory/1228-82-0x00000000031A0000-0x00000000031A1000-memory.dmp
memory/1228-78-0x0000000003160000-0x0000000003161000-memory.dmp
memory/1228-74-0x0000000003120000-0x0000000003121000-memory.dmp
memory/1228-72-0x0000000003100000-0x0000000003101000-memory.dmp
memory/1228-70-0x00000000030E0000-0x00000000030E1000-memory.dmp
memory/1228-53-0x0000000002FB0000-0x0000000002FB1000-memory.dmp
memory/1228-49-0x0000000002F70000-0x0000000002F71000-memory.dmp
memory/1228-40-0x0000000002F00000-0x0000000002F01000-memory.dmp
memory/1228-36-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/1228-29-0x0000000002E30000-0x0000000002E31000-memory.dmp
memory/1228-27-0x0000000002E10000-0x0000000002E11000-memory.dmp
memory/1228-22-0x0000000002DE0000-0x0000000002DE1000-memory.dmp
memory/1228-16-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/1228-14-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/1228-10-0x0000000002360000-0x0000000002361000-memory.dmp
memory/1344-90-0x0000000000400000-0x000000000040F000-memory.dmp