General
- Target jaffacakes118_[lightingspeeds com] LimeWire Pro v5 2 8 Multilingual Retail ZWT.exe
- Size 10.4MB
- Sample260910-e8qr5szyc1
- SHA256 ec78b1abc8aad088ea5697fb1326e51408f336036b118213fd856259017e8e46
- MD5 7d2f810b9ec7a325472c25b131eedc22
- SHA1 463fc226ea4e68b9fce2f7c29ee5121d86aacd76
- SHA512 f966d7ff9d19aa93045bc9d272d4cf9abfefb7658625939c8f76f003060baa1eebf75bc912f7cc88138f399a96a1a17d8ebe870f74ac8c78ac95ecd17dc3dde0
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvz:YX/KeBR/hly4YVY6
- TLSH T1B8B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_[lightingspeeds com] LimeWire Pro v5 2 8 Multilingual Retail ZWT.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_[lightingspeeds com] LimeWire Pro v5 2 8 Multilingual Retail ZWT.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_[lightingspeeds com] LimeWire Pro v5 2 8 Multilingual Retail ZWT.exe
- Size 10.4MB
- SHA256 ec78b1abc8aad088ea5697fb1326e51408f336036b118213fd856259017e8e46
- MD5 7d2f810b9ec7a325472c25b131eedc22
- SHA1 463fc226ea4e68b9fce2f7c29ee5121d86aacd76
- SHA512 f966d7ff9d19aa93045bc9d272d4cf9abfefb7658625939c8f76f003060baa1eebf75bc912f7cc88138f399a96a1a17d8ebe870f74ac8c78ac95ecd17dc3dde0
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvz:YX/KeBR/hly4YVY6
- TLSH T1B8B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext