General
- Target jaffacakes118_Spyware Doctor 5.5.0.178 and key.exe
- Size 8.6MB
- Sample260910-dtb5rsvhnb
- SHA256 615be17fa0fac680f538c71e2fb31a5a428d49fdf3d3ba4d91e671bf3e6b26c8
- MD5 b4af5c0e25889be628d2148409e686bf
- SHA1 4fa463b1c9108c6f09b239165b506e7cb905c4fe
- SHA512 f422598d994bbb1d19b894d0c76344865fc33fa5d9b4472182eef524a29335948a5b4b2aba82950f58b25fed9b9a4133975149adb2f11549f4a108a879d681f8
- SSDEEP 6144:lq32ProLPC6+ehD++oCwamXE+Q8+/FApQtZRL70/q0:+2oQ+TRL70/J
- TLSH T12C963A8335C2A777D1A640B69458C5AB6B29FCA3A909B573B684B30B44F21507F7333E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Spyware Doctor 5.5.0.178 and key.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Spyware Doctor 5.5.0.178 and key.exe
- Size 8.6MB
- SHA256 615be17fa0fac680f538c71e2fb31a5a428d49fdf3d3ba4d91e671bf3e6b26c8
- MD5 b4af5c0e25889be628d2148409e686bf
- SHA1 4fa463b1c9108c6f09b239165b506e7cb905c4fe
- SHA512 f422598d994bbb1d19b894d0c76344865fc33fa5d9b4472182eef524a29335948a5b4b2aba82950f58b25fed9b9a4133975149adb2f11549f4a108a879d681f8
- SSDEEP 6144:lq32ProLPC6+ehD++oCwamXE+Q8+/FApQtZRL70/q0:+2oQ+TRL70/J
- TLSH T12C963A8335C2A777D1A640B69458C5AB6B29FCA3A909B573B684B30B44F21507F7333E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext