Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 21:08
General
- Target jaffacakes118_Trojan-Dropper.Win32.VB.dfvu.exe
- Size 569KB
- Sample261009-zy16caex2v
- SHA256 fd1ec03f59f4663deb0c7a410d42235c6b038e90a3b02fa0e2768739fa3cec97
Malware Config
Signatures
- Suspicious use of SetThreadContext 2 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dfvu.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dfvu.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dfvu.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dfvu.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3840-20-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-19-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-1-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-17-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-31-0x0000000002470000-0x0000000002471000-memory.dmp
memory/3840-3-0x0000000000400000-0x00000000004FC000-memory.dmp
memory/3840-30-0x00000000007F0000-0x00000000007F1000-memory.dmp
memory/3840-29-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-28-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-27-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-26-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-25-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-24-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-23-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-22-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-21-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-2-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-0-0x0000000000400000-0x00000000004FC000-memory.dmp
memory/3840-18-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-16-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-15-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-13-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-14-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-12-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-11-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-10-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-9-0x0000000002480000-0x0000000002481000-memory.dmp
memory/3840-8-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-5-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-4-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-7-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-6-0x0000000002490000-0x0000000002491000-memory.dmp
memory/3840-33-0x0000000000401000-0x0000000000456000-memory.dmp
memory/3840-39-0x0000000000400000-0x00000000004FC000-memory.dmp
memory/4252-35-0x0000000000400000-0x0000000000409000-memory.dmp