General
- Target jaffacakes118_VSO Software Suite (For Yann.exe
- Size 8.6MB
- Sample260910-dydjdsel5s
- SHA256 4307b50afc52e2c510d968d5924e72756c22af8db375e8d2707cbe557b99e6d4
- MD5 1ae45416b1da951882292164e159296b
- SHA1 bac82f17693ea4695be8a92de60b2c31f008a9a6
- SHA512 d672f8fe99848db3fea15ae727b1ff4873452e3b053f3f80be55cd5ed83248a59901d68367360eeb7db81db53665b086634d6c6dd925c1f8d13936d9427873e5
- SSDEEP 6144:lq32ProLPC6+ehD++oCwamXE+Q8+/FApQtZRL70/qk:+2oQ+TRL70/V
- TLSH T1E8963A8335C2A777D1A640B69458C5AB6B29FCA3A909B573B684B30B44F21507F7333E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_VSO Software Suite (For Yann.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_VSO Software Suite (For Yann.exe
- Size 8.6MB
- SHA256 4307b50afc52e2c510d968d5924e72756c22af8db375e8d2707cbe557b99e6d4
- MD5 1ae45416b1da951882292164e159296b
- SHA1 bac82f17693ea4695be8a92de60b2c31f008a9a6
- SHA512 d672f8fe99848db3fea15ae727b1ff4873452e3b053f3f80be55cd5ed83248a59901d68367360eeb7db81db53665b086634d6c6dd925c1f8d13936d9427873e5
- SSDEEP 6144:lq32ProLPC6+ehD++oCwamXE+Q8+/FApQtZRL70/qk:+2oQ+TRL70/V
- TLSH T1E8963A8335C2A777D1A640B69458C5AB6B29FCA3A909B573B684B30B44F21507F7333E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext