Overview
overview
7Static
static
5jaffacakes...eb.exe
windows10-2004-x64
7jaffacakes...eb.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
301.exe
windows10-2004-x64
701.exe
windows11-ltsc_2024-x64
7$TEMP/UnRAR.exe
windows10-2004-x64
5$TEMP/UnRAR.exe
windows11-ltsc_2024-x64
5Uninstall.exe
windows10-2004-x64
7Uninstall.exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/10/2026, 21:16
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.DNSChanger.ueb.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.DNSChanger.ueb.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
01.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
01.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$TEMP/UnRAR.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$TEMP/UnRAR.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Uninstall.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Uninstall.exe
Resource
win11ltsc2024-20260911-en
General
- Target $TEMP/UnRAR.exe
- Size 90KB
- Sample261018-z4f3css12m
- SHA256 264d49f5a489c51ba5f7b96e496120b5331625cbe67ea5b577acc63c12a21dac
- MD5 d87ddf597baf91e7d32b20c0b4d855da
- SHA1 4e855b5c03e0a52d8057bc86b83a07f10d00e455
- SHA512 f6520aa83307eed340e214b4622f939a62dbbfdf9ce63e7c598250485615d617cb6eb503612e4440d55937e67d9bef270359c74a0efc4d082dc7e5d1355a3a26
- SSDEEP 1536:SLNbEpkAr56pGQp79iBtHDAUrtSGk2/DpZw9NyotCMU6KeTI3l0yB6AbSt:SLNbpA96779iB5DAUrAt08yofKeMl5n
- TLSH T16793020AC654DDF7C95D82BC1ABE4C65035BC3A133968BC79402D99DFD543F06B9A908
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral10/memory/6112-0-0x0000000000400000-0x0000000000442000-memory.dmp upx behavioral10/memory/6112-1-0x0000000000400000-0x0000000000442000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language UnRAR.exe