General
- Target jaffacakes118_Dirty Little Helper 98.exe
- Size 634KB
- Sample260910-dgckrsxtes
- SHA256 7e7025c1173c97b740cdb1c8458c16cc59f600d6983434df5572674be5c27442
- MD5 59e1c270ea5db4504c9a2c262003596b
- SHA1 031d87c0615f71b32b79526538144e47b7c8aaf9
- SHA512 69b6a4279aab909389ddc585e4b91059712e1d70e67d1751c42e9f888cd83e1b7da21629f2dd9cdfafa33e8d9f6050c589266c6d567a6fc24c6921551283519c
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T184D423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Dirty Little Helper 98.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Dirty Little Helper 98.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Dirty Little Helper 98.exe
- Size 634KB
- SHA256 7e7025c1173c97b740cdb1c8458c16cc59f600d6983434df5572674be5c27442
- MD5 59e1c270ea5db4504c9a2c262003596b
- SHA1 031d87c0615f71b32b79526538144e47b7c8aaf9
- SHA512 69b6a4279aab909389ddc585e4b91059712e1d70e67d1751c42e9f888cd83e1b7da21629f2dd9cdfafa33e8d9f6050c589266c6d567a6fc24c6921551283519c
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T184D423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext