Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 22:05
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-GameThief.Win32.MFirst.mm.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_Trojan-GameThief.Win32.MFirst.mm.exe
- Size 22KB
- Sample261011-1zs2sshg89
- SHA256 0369a135702a86ed220f2b7f4cd3c1f6db75088969f54da1110688ec2be84b2a
- MD5 4a953fbb0a36c2cbe437eed092d93ebe
- SHA1 eb2a4c4470ee729197d9318518f1a4fe6dcf92f6
- SHA512 312dc72deb36a908492f9d412510a48d9d772698504f0b317043323c12c8dc9c397270ec45010f598aea520a9cf15df2ada3ccfd72ca4eea3de167ad20fae294
- SSDEEP 384:E2G6V+n6EI33T63Kvbhr4yq6Nfato3GVyoNi6VKZyzn8rzX/HzIVl/oeAlqPTerq:S6V+n9I3u0cyq6oo3GVfNi6V8yQfXLIn
- TLSH T192A2D0E366816EBFC0AF81700452F51277A86AA9F1F6A7ED03D84367C7D9039340C25A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1656-0-0x0000000000400000-0x0000000000417000-memory.dmp upx behavioral2/memory/1656-5-0x0000000000400000-0x0000000000417000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan-GameThief.Win32.MFirst.mm.exe