Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 06:36
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.exe
- Size 281KB
- Sample261014-hdbxaazyhs
- SHA256 313967272981349e395262b61cd6d3305e0df1d800b633a9e2fd5a578742e341
- MD5 2d257d1988900c8eb60795111683323f
- SHA1 3f1a03f3b57e863ba2b9eb4d7772abfa25b8481a
- SHA512 a3f72fec6894ead9d6539b77a81de14e337abf053657d5f38a3b717d88cdc7ac39da6928ff845d9df3bc67599478ee399a39fe6c441486011098f4baf1e55de1
- SSDEEP 6144:2VvdTLMD2J2Qp362jfrVnIG75J3bNqpsXrMhpUEJ/qgt:2jTLMD2J2Sjjl7fxqpsXaR
- TLSH T1A154018A7636C74DD1968930D7D3FBF4AA1C8D92F650138B399ABF4E7A72188D881305
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4988-0-0x0000000000400000-0x00000000004B5000-memory.dmp upx behavioral2/memory/4988-2-0x0000000000400000-0x00000000004B5000-memory.dmp upx behavioral2/memory/4988-3-0x0000000000400000-0x00000000004B5000-memory.dmp upx - Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jaffacakes118_HEUR.Trojan.Win32.Generic.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jaffacakes118_HEUR.Trojan.Win32.Generic.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_HEUR.Trojan.Win32.Generic.exe