General
- Target jaffacakes118_Electrical Circuit Theory Technology 4th.exe
- Size 2.5MB
- Sample260910-cz7m7awxev
- SHA256 18d1c84a3b36c712dc60bd2bdf8bb6738c00685f33ff372204a244c17263a6d5
- MD5 60a4e0ab1a3e33cf3762f2f3e4f94ee7
- SHA1 b5e67050a3350cdaf2ab5a6a0a5fb0e767c6b538
- SHA512 1179800415c8e2f27afe1c3937d5f5bdbd5a99cb3c2b93f924ab9b272efc11521be0e060ea3cd75659d55110209a18ec322479b486c9209d5d82b45b670a05f2
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1c:gLdR0Eagv53rjA5ph11c
- TLSH T1ABC58D2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_Electrical Circuit Theory Technology 4th.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_Electrical Circuit Theory Technology 4th.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target jaffacakes118_Electrical Circuit Theory Technology 4th.exe
- Size 2.5MB
- SHA256 18d1c84a3b36c712dc60bd2bdf8bb6738c00685f33ff372204a244c17263a6d5
- MD5 60a4e0ab1a3e33cf3762f2f3e4f94ee7
- SHA1 b5e67050a3350cdaf2ab5a6a0a5fb0e767c6b538
- SHA512 1179800415c8e2f27afe1c3937d5f5bdbd5a99cb3c2b93f924ab9b272efc11521be0e060ea3cd75659d55110209a18ec322479b486c9209d5d82b45b670a05f2
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1c:gLdR0Eagv53rjA5ph11c
- TLSH T1ABC58D2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
3