b3bb8cdc7d5f1b31dfe4c5e68b91049b6c53cbe2a68c702827d3881e0d2b6874

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 21:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_Trojan-Dropper.Win32.VB.dddt.exe
Size 56KB
Sample261009-zypsbaex2s
SHA256 b3bb8cdc7d5f1b31dfe4c5e68b91049b6c53cbe2a68c702827d3881e0d2b6874
MD5 c79807033e54f5a54707e97bf47faebc
SHA1 f0e45b3fa2de93f9f978203b834e9bfe4036e496
SHA512 61a0f484a05e052d30ac347e2ca6067b6a2b4e42eb2ebcac3d659684f0b1286ce6095304d49a272d642db82c131b5867a89c060dd8d7ec2315a8e6be0ded2c1a
SSDEEP 768:NzaNvZV4F7F1XZsNsWaFtW3E5YxbAYRiaw9GH:Nz2B67F9ZslGtabA78H
TLSH
T1EA43501BE11822E1E6854A311876D1A93FB3BC35DECB8D5B36C777190C78942AF5322E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_Trojan-Dropper.Win32.VB.dddt.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2364	jaffacakes118_Trojan-Dropper.Win32.VB.dddt.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dddt.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan-Dropper.Win32.VB.dddt.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2364-0-0x0000000000400000-0x0000000000412000-memory.dmp

Download

memory/2364-3-0x0000000000400000-0x0000000000412000-memory.dmp