Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 00:01
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 28KB
- Sample261014-aa3a3ady3l
- SHA256 3bde7f8ddbb32464a5fed5b3048f62030c2c5bd2896139a38035de7b0e3f5cab
- MD5 20ca5a501f32d5682efd7493eec906fd
- SHA1 a56cc54cd9515e540de0412f032ef76f5b6c3dc9
- SHA512 2fefe69a6d08c0b52cbee10bc2b2d5c79c1ae4ff6f5395cd4e149805094fb56a0828c20fcf56d64c77f5805b852a8c5149d95cfd4f945b4dadf0fd765654fd2f
- SSDEEP 768:iOREEeXtdLwnIgecnmaM0zkM4ucGtp1eym+NCBnbcuyD7UBs:xmEAHLUdmanzknuztneX+UBnouy8Bs
- TLSH T159D2D185D3AB56C4C13E09BA1CEB29194330A166D1CEC6667AC9116BDE90FB9BD2C309
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3892-0-0x0000000000400000-0x0000000000415000-memory.dmp upx - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_HEUR.Trojan.Win32.Generic.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_HEUR.Trojan.Win32.Generic.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe