General
- Target jaffacakes118_Devil Fahrstuhl zur Hoelle 2010 German 1080p BluRay x264-UNKNOWN.exe
- Size 8.2MB
- Sample260910-d3wkrsx1fx
- SHA256 b249c0b4147bb35cadd14035bbdce259152cc9504ec4ba42e9d4f293c452a5f6
- MD5 4c0d465e32dfbe22073864b421c7bc04
- SHA1 9de23109251cc4dded06021d1e4ababe04bdc85e
- SHA512 8bbfc98cb577649cd90a421b1c2f418820fc7bb90bd42c47cc7295180447287cdb2fc6460ccac50979cd1b5ade7f1a50692cfa161928150f3552db2e4cc2a1a4
- SSDEEP 3072:fUBSwylBWvQKxALAHJvq+YMtO77zxLAXFsQYcD01rrfd:fUgwaBWvNpS+s7tLlQYO0t7d
- TLSH T1B2867FFD87B5A625D503DE340CA279367272DDA8C40BC82917AC3D10953ADB27B7E623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Devil Fahrstuhl zur Hoelle 2010 German 1080p BluRay x264-UNKNOWN.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Devil Fahrstuhl zur Hoelle 2010 German 1080p BluRay x264-UNKNOWN.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Devil Fahrstuhl zur Hoelle 2010 German 1080p BluRay x264-UNKNOWN.exe
- Size 8.2MB
- SHA256 b249c0b4147bb35cadd14035bbdce259152cc9504ec4ba42e9d4f293c452a5f6
- MD5 4c0d465e32dfbe22073864b421c7bc04
- SHA1 9de23109251cc4dded06021d1e4ababe04bdc85e
- SHA512 8bbfc98cb577649cd90a421b1c2f418820fc7bb90bd42c47cc7295180447287cdb2fc6460ccac50979cd1b5ade7f1a50692cfa161928150f3552db2e4cc2a1a4
- SSDEEP 3072:fUBSwylBWvQKxALAHJvq+YMtO77zxLAXFsQYcD01rrfd:fUgwaBWvNpS+s7tLlQYO0t7d
- TLSH T1B2867FFD87B5A625D503DE340CA279367272DDA8C40BC82917AC3D10953ADB27B7E623
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1