General
- Target jaffacakes118_Encyclopedia of Environmental Ethics Philosophy 2 Volume.exe
- Size 2.5MB
- Sample260910-d2wjdax1b1
- SHA256 c799f27e2407714969006b734270cc6bed76a77baab3e5c5e1b5c75470359cf8
- MD5 cdf0b9ec71d230909b6b9d8c67733b99
- SHA1 d79332820d34b599b67f82e5f04679c5ab2e1ea4
- SHA512 9085b4fcddf3d1c14b1b7930c905e0483c010425ffd1ddc6522852c5afb0bbaeb6e88b1606126f8002862087ddc19a6f8e6a6d81e550052f988e53e3e98631d9
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1V:gLdR0Eagv53rjA5ph11V
- TLSH T154C58C2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_Encyclopedia of Environmental Ethics Philosophy 2 Volume.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_Encyclopedia of Environmental Ethics Philosophy 2 Volume.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target jaffacakes118_Encyclopedia of Environmental Ethics Philosophy 2 Volume.exe
- Size 2.5MB
- SHA256 c799f27e2407714969006b734270cc6bed76a77baab3e5c5e1b5c75470359cf8
- MD5 cdf0b9ec71d230909b6b9d8c67733b99
- SHA1 d79332820d34b599b67f82e5f04679c5ab2e1ea4
- SHA512 9085b4fcddf3d1c14b1b7930c905e0483c010425ffd1ddc6522852c5afb0bbaeb6e88b1606126f8002862087ddc19a6f8e6a6d81e550052f988e53e3e98631d9
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1V:gLdR0Eagv53rjA5ph11V
- TLSH T154C58C2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
3