Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/10/2026, 23:09
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Agent.pqks.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
General
- Target jaffacakes118_Trojan.Win32.Agent.pqks.exe
- Size 52KB
- Sample261015-25csfad16w
- SHA256 a4408c3791c9017c29e4934e321ef9a161245fe4c8684045a0707f7c7d9a2e6c
- MD5 53c99582804abfe4616c87d1b7cbaa4b
- SHA1 04f1126740c57a6dbd51ba13ff09f2feacfb1531
- SHA512 6bc01f33a3e4fd35d2033504432a021388889b7bb23cef41544d6612464fd7159c35891f2d878e941b08da85cfdd918048eea95897842ba5dc634664bca7658c
- SSDEEP 1536:wX3zen4EpwMOGnsutVkMBm2SmWrvX9T/knaf0zm:oDZEXOGsoVJBm2lWX9T/km
- TLSH T15733E1931A8C1141DDE628B9426F4B137DF3B83456A21A15A5DEAB52DC20230F933FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\O: jaffacakes118_Trojan.Win32.Agent.pqks.exe -
resource yara_rule behavioral2/memory/4820-0-0x0000000000110000-0x0000000000130000-memory.dmp upx behavioral2/memory/4820-2-0x0000000000110000-0x0000000000130000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Agent.pqks.exe