General
- Target jaffacakes118_JetAudio 7 1 8 4006 Plus VX Retail www demonpeer org.exe
- Size 10.4MB
- Sample260910-dapxhsdm9y
- SHA256 28614a9da5b3f76cd3ac2bcb3b315cf92ed601085173cf1e1425fffab807df3a
- MD5 83da728f1c99185ef8448498b0a8ac15
- SHA1 54aecc4a00f6bf07962fee971b94f6ef59a89368
- SHA512 72c83608d9906e519c050be08440af1984da8f360c8def6791a282a4422c1e131e5dacd769c22075eab4734f652ada6b95f313b647adfdbdd0635eb11dfd67d3
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvA:YX/KeBR/hly4YVYj
- TLSH T192B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_JetAudio 7 1 8 4006 Plus VX Retail www demonpeer org.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_JetAudio 7 1 8 4006 Plus VX Retail www demonpeer org.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_JetAudio 7 1 8 4006 Plus VX Retail www demonpeer org.exe
- Size 10.4MB
- SHA256 28614a9da5b3f76cd3ac2bcb3b315cf92ed601085173cf1e1425fffab807df3a
- MD5 83da728f1c99185ef8448498b0a8ac15
- SHA1 54aecc4a00f6bf07962fee971b94f6ef59a89368
- SHA512 72c83608d9906e519c050be08440af1984da8f360c8def6791a282a4422c1e131e5dacd769c22075eab4734f652ada6b95f313b647adfdbdd0635eb11dfd67d3
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvA:YX/KeBR/hly4YVYj
- TLSH T192B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext