Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/10/2026, 03:51

General

  • Target
    jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
  • Size 477KB
  • Sample261014-eeta6sx1ds
  • SHA256 35943841e1512630e225673bf1d45cbfcd7d0b0ad1819d0f07e64675f06c2b3c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 14 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
    "C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe"
    1⤵
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    PID:3128
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5940

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          InstallOptions.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\InstallOptions.dll
          • Size 14KB
          • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LangDLL.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\LangDLL.dll
          • Size 5KB
          • SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          NSISdl.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\NSISdl.dll
          • Size 14KB
          • SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UAC.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\UAC.dll
          • Size 17KB
          • SHA256 3555afe95e8bb269240a21520361677b280562b802978fccfb27490c79b9a478
          • MD5 SHA1 SHA512 SSDEEP TLSH

          inetc.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\inetc.dll
          • Size 20KB
          • SHA256 6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ioSpecial.ini

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\ioSpecial.ini
          • Size 1KB
          • SHA256 26eb634b7f26978d505272030d8be26fd39a3db1028b2c07802032e67fa7d28a
          • MD5 SHA1 SHA512 TLSH

          ioSpecial.ini

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\ioSpecial.ini
          • Size 1KB
          • SHA256 b2c04125388ac966603a7416d1ee2f76d52325fa8c94a845dbb0b83901e377f7
          • MD5 SHA1 SHA512 TLSH

          linker.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\linker.dll
          • Size 7KB
          • SHA256 67552ebf58e98e841dcd9f4213ad3eb134d595f04839771618f0bb1c48ea2b92
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsisunz.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\nsisunz.dll
          • Size 40KB
          • SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          show_page_toolbar

          • Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\show_page_toolbar
          • Size 848B
          • SHA256 f28dfe2e21d41ec9d71f2b15d71f142251e329868d7cc4f62ae23605813d0b8a
          • MD5 SHA1 SHA512 TLSH