Analysis
- max time kernel
150s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 07:55
Behavioral task
behavioral1
Sample
jaffacakes118_P2P-Worm.Win32.Picsys.c.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_P2P-Worm.Win32.Picsys.c.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target jaffacakes118_P2P-Worm.Win32.Picsys.c.exe
- Size 68KB
- Sample261014-jskcmsas8p
- SHA256 ea9d73b379b87bdcecf53db688b21a44f8fd4db098c69bb559262256f7c0c380
- MD5 c2fb9c73631de60eceeaf1d4843d0a8b
- SHA1 28d9cc7ce656e87eabc7a293473ec40a31de7fe1
- SHA512 df0eb3832b46bfbc7d188fba0677f1741add8407dc3861f95af2c4c2a8a286d9ff0b1f4ffd272c2f3c3ca28b503c58f3ff3269a1880406d0a185b4206635c98a
- SSDEEP 1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSDnAwwE:5JjcF8KfCOcjk+guPVjSDncE
- TLSH T1E26302F5FEAD9E22F4834FF5651F87822319EEC2412B2B6C9955581425C20EB447A13B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" jaffacakes118_P2P-Worm.Win32.Picsys.c.exe - Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\virtua girl - bailey short skirt.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\hot mature blonde in stockings.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\horny little blonde spreading pink.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - shower scene.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\GTA3 crack.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\honie with thick ass spreading her money maker.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\blonde showing her pussy to her neighbor.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\15 year old webcam.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\Xbox Iso 2 Rom Converter.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\uncle fred spanking his young nieces little ass.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\hairy lezzies torching it up with hot candles.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\Hotmail Hacker.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\kill osama bin laden game.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\win2k serial.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\bad gal being tied and bound.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\teen with her legs wide and fingers in her wet cunt.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\action with three chicks getting it on with a guy.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\sexy amatures sucking whole bag.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\pamela anderson nude.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\hot tomoli lathering up sexy body for boyfriend's tongue.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\tight anal fucking like you want it.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\blonde beauty ass fucked.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\gettin it hard up the ass.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\winxcfg.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\nikki nova sex scene huge dick blowjob.mpg.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\chubby girl bukkake gang banged sucking cock.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\couple babes getting off with well hung dude.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\fetish bondage preteen porno.mpg.pif jaffacakes118_P2P-Worm.Win32.Picsys.c.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe jaffacakes118_P2P-Worm.Win32.Picsys.c.exe -
resource yara_rule behavioral2/memory/1584-0-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/files/0x000d00000001c491-5.dat upx behavioral2/memory/1584-35-0x0000000000400000-0x0000000000467000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_P2P-Worm.Win32.Picsys.c.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\macromd\jenna jameson - shower scene.exe
- Size 93KB
- SHA256 a7125d1f3b03e783eb1236a189189bf32288eb10df6a5c054203bd6e79962302
- MD5 b589f4703407efc7d0e7a38db5d069c3
- SHA1 13afb091c1a222beacb9bfdad0abb1d184386f11
- SHA512 14cef2fb9219398c9e2b17f91fc6a2809eed492839a239ae1d0f8409123db5dbc25bb5d10975371036dae4836061c1b3bf1dd8b2b7d2352583acdbf11c4e07de
- SSDEEP 1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS0xGGZpFX5bL1t4R6C:5JjcF8KfCOcjk+guPVjS0ggbLaR6C
- TLSH T1989312FAED89CD13C5178FF9912FC7DE1396EEA65232367D9862499810D21EB2473032
- MD5 SHA1 SHA512 SSDEEP TLSH