Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 22:09
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.CDur.uu.dll
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.CDur.uu.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target jaffacakes118_Trojan.Win32.CDur.uu.dll
- Size 67KB
- Sample261018-13a1dsbs2w
- SHA256 b4e08df40c1dc9f2d71ac1bfa51b3869a5ab880a5c4ba9375d97b8da972e2ed6
- MD5 fc4fa7dbbae24ef07ecb4392d8bf53bc
- SHA1 fcd2688845200f3b2b12a526e24b0fd03da6a0bf
- SHA512 c3312e6c562005a2a5090586993b6633fd6e4113aef6371914c4bb6cc79a5da4681c372fbb70c80e4d2f70028015e59afd082edf20a9f6456577c020226f6490
- SSDEEP 1536:ombVAcoIUy/synIkvV1QaXnm0pbyBPShWD04CIE3aGzH72wT5:ouA7OEynIkXBXBbiaN4C3Ln
- TLSH T1C56301405FC29B5CD0F3883969F7904038357AB2EABB2F5932F479EA1C3632989D1765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4948 wrote to memory of 1168 4948 rundll32.exe 87
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.CDur.uu.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4948 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.CDur.uu.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:1168
-