General
- Target jaffacakes118_000 trackers! READ the readme txt!!===Saxon5.exe
- Size 10.4MB
- Sample260910-c3r2xadk7s
- SHA256 f63ae2b0588d7cb63e742e1f0f4315a10082cac962f407993834abe42a26c034
- MD5 1abc34cbf73ee9ed9d92dbbfef4c64ed
- SHA1 25833d0a79363b5f8aecc876a615f4e735caa4a4
- SHA512 f01cf6c2341d9a960f8a71c67fc2ff9fb88f7bab12f7b49b815a3e02ebe16e658077c2ae9767db44bcb468819546fafda18cc275829fb538d07f8d267e587795
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvX:YX/KeBR/hly4YVY+
- TLSH T1CFB627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_000 trackers! READ the readme txt!!===Saxon5.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_000 trackers! READ the readme txt!!===Saxon5.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_000 trackers! READ the readme txt!!===Saxon5.exe
- Size 10.4MB
- SHA256 f63ae2b0588d7cb63e742e1f0f4315a10082cac962f407993834abe42a26c034
- MD5 1abc34cbf73ee9ed9d92dbbfef4c64ed
- SHA1 25833d0a79363b5f8aecc876a615f4e735caa4a4
- SHA512 f01cf6c2341d9a960f8a71c67fc2ff9fb88f7bab12f7b49b815a3e02ebe16e658077c2ae9767db44bcb468819546fafda18cc275829fb538d07f8d267e587795
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvX:YX/KeBR/hly4YVY+
- TLSH T1CFB627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext