Overview
overview
7Static
static
3jaffacakes....a.exe
windows10-2004-x64
7jaffacakes....a.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/inetc.dll
windows10-2004-x64
3$PLUGINSDIR/inetc.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nz.dll
windows10-2004-x64
3$PLUGINSDI...nz.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 03:51
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/inetc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/inetc.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/linker.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/linker.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/nsisunz.dll
Resource
win11ltsc2024-20260911-en
General
- Target jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
- Size 477KB
- Sample261014-eeta6sx1ds
- SHA256 35943841e1512630e225673bf1d45cbfcd7d0b0ad1819d0f07e64675f06c2b3c
- MD5 6121f0cf84b1a589b206078e49cf23e3
- SHA1 5fecbf3e03106f5127ff0a474910f57df4026520
- SHA512 d8384cb671486da65bb562d4ba2bea8edd31543a0af93d892614ceb8f0c20f182dab62a471b4b47000fbee848d617593f2cc839a04c72cba7d48cad493b48e88
- SSDEEP 6144:ke34R2W9/0zh360EV2rnCUZG/t7SqzTBqTzP7n7O7L6K2Bfo70l:K2oMzh36xV2GC0ZTsnz7O7L6ju70l
- TLSH T11EA49D70B950E87EC36C88389056DB5993F96471AF9000A3333E7A8D1D792A25D67FCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 14 IoCs
pid Process 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe 3128 jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe - Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe Key created \REGISTRY\USER\S-1-5-21-650287814-2715975232-1279715623-1000_Classes\Local Settings jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.Downloader.Win32.Inffinity.a.exe"1⤵
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3128
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5940
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- TLSH T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\NSISdl.dll
- Size 14KB
- SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- MD5 a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1 168f3c158913b0367bf79fa413357fbe97018191
- SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
- TLSH T1D6624C15AA2008F6C761127470E73BBE2BB34E72471485C39BE3595FBD25603AB72AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\UAC.dll
- Size 17KB
- SHA256 3555afe95e8bb269240a21520361677b280562b802978fccfb27490c79b9a478
- MD5 09caf01bc8d88eeb733abc161acff659
- SHA1 b8c2126d641f88628c632dd2259686da3776a6da
- SHA512 ef1e8fc4fc8f5609483b2c459d00a47036699dfb70b6be6f10a30c5d2fc66bae174345bffa9a44abd9ca029e609ff834d701ff6a769cca09fe5562365d5010fa
- SSDEEP 384:w9JzaeWrF8d22hXAGFkr2WqErkuCYMAWS5Ns8AXXki:wLaBrrTXr3qruCYuS5qk
- TLSH T1A9724C65BBA083FFD5500530A6E2671217EB98301979586F4E33EECA2FB59436C3A703
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\inetc.dll
- Size 20KB
- SHA256 6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
- MD5 50fdadda3e993688401f6f1108fabdb4
- SHA1 04a9ae55d0fb726be49809582cea41d75bf22a9a
- SHA512 e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
- SSDEEP 384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
- TLSH T1A992F906AE592AF3E3654930B86C3707469EAE31346154876AE32FC92839257FA37743
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\ioSpecial.ini
- Size 1KB
- SHA256 26eb634b7f26978d505272030d8be26fd39a3db1028b2c07802032e67fa7d28a
- MD5 623ef868971696856a9b8ca04034410d
- SHA1 dc72cd9d362cac0326488502a34545d6c2ea3047
- SHA512 275f70986facd400e1d1a4786c1a697098ba4599a7a372d3923e9c1465796a7ba744c00d048e5ee28827d493f56508f7dbcafe66492041f356ffcfe5e0fa2874
- TLSH T16F11EF4F531C833104165186A5AF63E643D61D689322AAE464B0C8ADB39ACE286FE683
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\ioSpecial.ini
- Size 1KB
- SHA256 b2c04125388ac966603a7416d1ee2f76d52325fa8c94a845dbb0b83901e377f7
- MD5 9eb82b95ca45ee05e50319eb8a05e3ad
- SHA1 98399abcb15df9524b97b5e4b3de0d1efd2b9e7e
- SHA512 30d5200f71d07c2a2b9acb6ee42c1a6e3569095b269dee280683f6199c0dd4d909db0a0532e702b3b5ca82a975c0e210b9aea04c0969be93a4ac131a7a22eba8
- TLSH T16411124F531C437104165186A59F63E643D61D6883239AE4A471C8ADB35ECE2C2FE687
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\linker.dll
- Size 7KB
- SHA256 67552ebf58e98e841dcd9f4213ad3eb134d595f04839771618f0bb1c48ea2b92
- MD5 122754bdae09014ed8be78a8dd3618c0
- SHA1 8a1d4a0b8202d2261a12d97aebfe33144c274444
- SHA512 7b9b5f8b52db793b4833a75bd8f122f28f2df00d43bd35efc831c2b8457009d51fe39874c691389c2fdc87ed411919b59da50199e3f719bd4cfb166367f185d9
- SSDEEP 96:Xky9W/VixqhFtMpnEH5lpDyUL2bk/gkfgilv:XH9W/oCFtMZEH5NL2bTkfFlv
- TLSH T1DEF1C872B7E481F7E4E707716CB26B574B79BC121724C09D015331C5BA70A56EE28B23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\nsisunz.dll
- Size 40KB
- SHA256 6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d
- MD5 5f13dbc378792f23e598079fc1e4422b
- SHA1 5813c05802f15930aa860b8363af2b58426c8adf
- SHA512 9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5
- SSDEEP 384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4
- TLSH T188038EA392C146FBC5F8843931DA6E1D6A9EFC301BC16103CB2DBDA52D153967A642CF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj4BC6.tmp\show_page_toolbar
- Size 848B
- SHA256 f28dfe2e21d41ec9d71f2b15d71f142251e329868d7cc4f62ae23605813d0b8a
- MD5 4e4fea62860987eabdf85bad6da5ddc4
- SHA1 ae33877bc0b5f4072e36d2cfe9333064980d813f
- SHA512 7be0bbec64aff2db1c1e26ad46e94e0b5e6394c6b8a08175d0125f44e237c4730a61e5bb346bdb64946e208b3f845d4ff1d3bf2eccfcae0bf3da13f30afcfeea
- TLSH T1BF01485E01AEC3595814758174E336C18F4519267E429CE0EB7514C7E30B163A6EC3A4
- MD5 SHA1 SHA512 TLSH