Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
18/10/2026, 15:24
General
- Target jaffacakes118_Trojan.Win32.Refroso.fxhs.exe
- Size 383KB
- Sample261018-sthd4set9j
- SHA256 ade5681f3983e3ea3ee5206853a0c59d60438acff24eba4b83c7e8c82e7b4596
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 3 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Refroso.fxhs.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Refroso.fxhs.exe"1⤵
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Refroso.fxhs.exe"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_Trojan.Win32.Refroso.fxhs.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1372-52-0x0000000000400000-0x0000000000409000-memory.dmp
memory/1372-54-0x0000000000400000-0x0000000000408960-memory.dmp
memory/3308-0-0x0000000000400000-0x0000000000504000-memory.dmp
memory/3308-10-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-7-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-6-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-4-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-23-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-22-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-27-0x0000000002BD0000-0x0000000002BD1000-memory.dmp
memory/3308-26-0x00000000022B0000-0x00000000022B1000-memory.dmp
memory/3308-25-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-24-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-21-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-49-0x0000000002E20000-0x0000000002E21000-memory.dmp
memory/3308-51-0x0000000002E40000-0x0000000002E41000-memory.dmp
memory/3308-50-0x0000000002E50000-0x0000000002E51000-memory.dmp
memory/3308-47-0x0000000002CF0000-0x0000000002CF1000-memory.dmp
memory/3308-45-0x0000000002CC0000-0x0000000002CC1000-memory.dmp
memory/3308-42-0x0000000002CB0000-0x0000000002CB1000-memory.dmp
memory/3308-41-0x0000000002C80000-0x0000000002C81000-memory.dmp
memory/3308-40-0x0000000002C90000-0x0000000002C91000-memory.dmp
memory/3308-37-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-36-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-35-0x00000000022E0000-0x00000000022E1000-memory.dmp
memory/3308-32-0x00000000022A0000-0x00000000022A1000-memory.dmp
memory/3308-31-0x0000000002280000-0x0000000002281000-memory.dmp
memory/3308-48-0x0000000002E30000-0x0000000002E31000-memory.dmp
memory/3308-46-0x0000000002D00000-0x0000000002D01000-memory.dmp
memory/3308-44-0x0000000002CD0000-0x0000000002CD1000-memory.dmp
memory/3308-43-0x0000000002CA0000-0x0000000002CA1000-memory.dmp
memory/3308-39-0x0000000002C60000-0x0000000002C61000-memory.dmp
memory/3308-38-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/3308-34-0x0000000002300000-0x0000000002301000-memory.dmp
memory/3308-33-0x0000000002C00000-0x0000000002C01000-memory.dmp
memory/3308-30-0x0000000002BF0000-0x0000000002BF1000-memory.dmp
memory/3308-20-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-19-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-18-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-16-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-17-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-15-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-14-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-13-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-12-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-11-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-9-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-8-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-5-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-3-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/3308-2-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/3308-1-0x0000000002BE0000-0x0000000002BE4000-memory.dmp
memory/3308-57-0x0000000000400000-0x0000000000504000-memory.dmp