General
- Target jaffacakes118_Joomla Flash NEW Templates 2010 ttCollection_1.exe
- Size 2.5MB
- Sample260910-d92qcsytgv
- SHA256 15a5106a33f6e3e98ef23a5e45f244ecee91bc1f87dcfb6a4b589e610871769d
- MD5 5de6b4066da59e8de0a7f0f93b2b781c
- SHA1 e236d590912e5886d49b04e8d96280a3b4bfe549
- SHA512 e38925f628acf022cc80677e2afc41717640b43ba2825d33fab6b4ef31e6dbbc4617c13b9735a281a40f0dd186ff92d34da3293590ee2aaed5d08173c80a3a8e
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1M:gLdR0Eagv53rjA5ph11M
- TLSH T18EC58D2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_Joomla Flash NEW Templates 2010 ttCollection_1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
jaffacakes118_Joomla Flash NEW Templates 2010 ttCollection_1.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target jaffacakes118_Joomla Flash NEW Templates 2010 ttCollection_1.exe
- Size 2.5MB
- SHA256 15a5106a33f6e3e98ef23a5e45f244ecee91bc1f87dcfb6a4b589e610871769d
- MD5 5de6b4066da59e8de0a7f0f93b2b781c
- SHA1 e236d590912e5886d49b04e8d96280a3b4bfe549
- SHA512 e38925f628acf022cc80677e2afc41717640b43ba2825d33fab6b4ef31e6dbbc4617c13b9735a281a40f0dd186ff92d34da3293590ee2aaed5d08173c80a3a8e
- SSDEEP 3072:yfLdR0Eaglx5mdVstpPrTUZDhcKyLeFn1M:gLdR0Eagv53rjA5ph11M
- TLSH T18EC58D2232C1C072E26315348EA5D2B18B7AFC714E719DEB7BD507BA4F692C2DA24357
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Modify Registry
3