General
- Target jaffacakes118_CloneDVD v2.9.1.8 -Final- Multi.exe
- Size 799KB
- Sample260910-dmhc7sdr3s
- SHA256 e66585f15270cdfb111cd1371ac59d76a6bcdbe36221bf786756ecadec4d66c6
- MD5 952eeb244bef2764db72c0fd04184daf
- SHA1 72546e8b1aa95bfd7e758e7c7f7138d123235c5f
- SHA512 25bfd9e98e0af7dd641fec38125f951acf073aa1e24b79fe8d53f44426213151c1cfe4d116a33530fb44f6aceedb41f715eecbf2f39dcb06ea323d92c3b1e617
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T1D50523BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_CloneDVD v2.9.1.8 -Final- Multi.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_CloneDVD v2.9.1.8 -Final- Multi.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_CloneDVD v2.9.1.8 -Final- Multi.exe
- Size 799KB
- SHA256 e66585f15270cdfb111cd1371ac59d76a6bcdbe36221bf786756ecadec4d66c6
- MD5 952eeb244bef2764db72c0fd04184daf
- SHA1 72546e8b1aa95bfd7e758e7c7f7138d123235c5f
- SHA512 25bfd9e98e0af7dd641fec38125f951acf073aa1e24b79fe8d53f44426213151c1cfe4d116a33530fb44f6aceedb41f715eecbf2f39dcb06ea323d92c3b1e617
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T1D50523BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
NirSoft MailPassView
Password recovery tool for various email clients
Accesses Microsoft Outlook accounts
Suspicious use of SetThreadContext