General
- Target jaffacakes118_XP CyberMac Extreme SP3 2009.exe
- Size 8.2MB
- Sample260910-c2rdzsthnf
- SHA256 df51e1f4130067d2913f8f30e4a5ef8bae6ca95a0219ab532b17db56c8bb54de
- MD5 d50b50936324316640eaa410affe0bef
- SHA1 6034c513d271a8282ea123d8ab36948d7733f1c9
- SHA512 366d2519421a911cb239eaccbaf9925e8b17a0696300e8c27401e127acf081c92d5f7c5523b2a5ac7f722f06613bba46845dde53f2f58491708b46830eca035a
- SSDEEP 3072:fUBSwylBWvQKxALAHJvq+YMtO77zxLAXFsQYcD01rrfA:fUgwaBWvNpS+s7tLlQYO0t7A
- TLSH T168867FFD87B5A625D503DE340CA279367272DDA8C40BC82917AC3D10953ADB27B7E623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_XP CyberMac Extreme SP3 2009.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_XP CyberMac Extreme SP3 2009.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_XP CyberMac Extreme SP3 2009.exe
- Size 8.2MB
- SHA256 df51e1f4130067d2913f8f30e4a5ef8bae6ca95a0219ab532b17db56c8bb54de
- MD5 d50b50936324316640eaa410affe0bef
- SHA1 6034c513d271a8282ea123d8ab36948d7733f1c9
- SHA512 366d2519421a911cb239eaccbaf9925e8b17a0696300e8c27401e127acf081c92d5f7c5523b2a5ac7f722f06613bba46845dde53f2f58491708b46830eca035a
- SSDEEP 3072:fUBSwylBWvQKxALAHJvq+YMtO77zxLAXFsQYcD01rrfA:fUgwaBWvNpS+s7tLlQYO0t7A
- TLSH T168867FFD87B5A625D503DE340CA279367272DDA8C40BC82917AC3D10953ADB27B7E623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1