2acd02a5276c6b2e416fbe56a44fe2b7a9ed4b1bdb0be176efa960e3b50a15bb

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 13:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.AdWare.Win32.Relevant.c.exe
Size 508KB
Sample261014-q7518adz21
SHA256 2acd02a5276c6b2e416fbe56a44fe2b7a9ed4b1bdb0be176efa960e3b50a15bb
MD5 e4df0485808b756e3fce3fa072a4d879
SHA1 b25cde3ca1e7226615895cb9571d32d02c77dd2c
SHA512 531c2b3ae5557d8246323940c608f0c467295344969e896010e8b5cc096d4f167923dbc80e22239caaed9ee891c4920b64f89ef8e3c650dc8fb963712578fd1f
SSDEEP 12288:RMzFYMrrdZ2qxoKkQ0LYHSgtg/fXrOVhIJhzIcuPo:RMzFRrrmqxtiYHSgmDOVhIJhzI5Po
TLSH
T114B423C676E0C2F6C05204375D738759B3BBABAD3F1172671F25BF2D9A31042A825D8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3572	jaffacakes118_not-a-virus.AdWare.Win32.Relevant.c.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_not-a-virus.AdWare.Win32.Relevant.c.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.AdWare.Win32.Relevant.c.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_not-a-virus.AdWare.Win32.Relevant.c.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh854.tmp\InstallOptions.dll
Size 14KB
SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
TLSH
T172622A11778888F3DB92013EB4533707AF9D5126B4929ED2CA271FC66D2B09D3EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsh854.tmp\ioSpecial.ini
Size 643B
SHA256 9fbeba3ffe2a465943c5ca0f1df5a7ce4e883aa9f585331598f607251a80edcf
MD5 8118ae9ca6520ccb18411dcade5c1d18
SHA1 1b888207a0afaa04bd09c66e7ecbe51e8ec7754e
SHA512 e07149f3f9e5aeafaf36d50d6003613c8819feeb920515d9f24c8e8e231cf1d15d647c20c7d77415033abe6fa49e4e116d6004bb9712c46e4054de3541748325
TLSH
T108F0DDD9145E835D8838A153A5797B9913F12D104B0D39F9E1325C875BCCCE5C8CC982
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsh854.tmp\ioSpecial.ini
Size 604B
SHA256 0b4e1a580f210fa0ac3ef05be4769608069499a7354dcfd5c671356c7e48cabc
MD5 fad72480668cdd54e310cd2298da869e
SHA1 919fbb8189e288cc6d4d86da1ca8dfe908219ba3
SHA512 48c29bf43bc5228ca9f4b703d462392fced08b901716de99551089266473b8b59459720c3012eebed208dee30f5fc2a74a2f432bf6d928891c4efe594182a4a5
TLSH
T11DF0AC9A144E831D8870A523A5797B9907F12D60070939F9A5325C879BCDCE5C8CC983
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads