Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 22:21
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Chapak.cjyc.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
General
- Target jaffacakes118_Trojan.Win32.Chapak.cjyc.exe
- Size 507KB
- Sample261018-19544sch37
- SHA256 9acba0e9a6fcf7d47b1e1f8ab31dd06e208f10a44831e911f84407028036cd05
- MD5 f382bfc6919e8e951a4e0a1f422a8b6a
- SHA1 82dfe414a2ad5ee90ab69d5ed5c97cf5a0b6d53d
- SHA512 71cebc329556a444fb13a4d406f1075da1b06cf8f1e59591aded81d54ab6eacc3660a2c8c0c17c58b2c73421126d303f56527845abfd64055af5b6eeafaf510b
- SSDEEP 12288:YxjEl1250GEUeh+BpxLf1Jfd52BFOWE5sihXvCdSz8SUKA9f:YhA1W/hLf1Jfv2LZE5Th+Sz8SAx
- TLSH T15BB4237867A0D21FE11CD078201C8DF6AB8DE898C9A7302586B5F40F466D3D964B7BDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3724-0-0x0000000000400000-0x00000000004B3000-memory.dmp upx behavioral2/memory/3724-3-0x0000000000400000-0x00000000004B3000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 4852 3724 WerFault.exe 87 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jaffacakes118_Trojan.Win32.Chapak.cjyc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Chapak.cjyc.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Chapak.cjyc.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3724 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 4522⤵
- Program crash
PID:4852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 3724 -ip 37241⤵PID:5812