081f97d22187a3b993b37f06889932e7d3bcf0004b13752c927e6fea94cb9d76

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 04:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe
Size 1.2MB
Sample261014-enqlmsft7t
SHA256 081f97d22187a3b993b37f06889932e7d3bcf0004b13752c927e6fea94cb9d76
MD5 0a6aeb1103bb6a1ddc918339441db385
SHA1 cb8227093fe8dd0fed52c67b5b47a7b082f71546
SHA512 acc777740024a6e89acf338a956a48addc1bd3c216e7b795b7ccf11890ff21aea1dfcdde70a3603fe19e253babaf54b04197695c3b3db7a108c65e0ad2f5b831
SSDEEP 24576:bOcEidAmt+Le0ttQIrqkuYSe8bRM+sJaSeoXs:PEiOmMvwI+kIRM/ays
TLSH
T17B457B117A90D0F1E5B301308EFB66BA597C7D22172584FBA3C4F9281DBF8E16634A5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Burden.gen.exe"
1⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:892

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3220

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

WnBrowserInfo.ini

Path C:\Users\Admin\AppData\Local\Temp\WnBrowserInfo.ini
Size 129B
SHA256 c949fe56777c4204779bf66084c7d534aa1fd86e22c4993c398b9bdfbdb14d78
MD5 67b3bafaa6f7ce1f4c29af70778ab277
SHA1 3977cd41752043008db6a6cd58bf6259f3c12bd7
SHA512 feadb8b5999208890c58d87463297df01ff3d27fd4b821958f3cb3f3ee6a89ef1138fec3e6bfd8498ffb854c84924f7ae62db5d6362d19eec8dd08760c73d2d2
TLSH
T173B04C10C0899609491555235576A6ECE0F246186F8FB6144266C4481794C1DBA45209
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads