General
- Target jaffacakes118_Adion djdecks v0.9.0.exe
- Size 712KB
- Sample260910-ejnaqafj6z
- SHA256 7d337564787120a82325d507ce709644c35343e1ca94ffcdb94a03e29886b27f
- MD5 41a8430c6ce726fa7e1652bb18c8a920
- SHA1 e348d961c63da799ecb4436317e69e74de18ac46
- SHA512 4819994dec366a0cd8eea080f32a0a5173747c0c0a2bc1ff9ce9ee53a95cf949e7d9776f79b2ba574f5338f6c4b12551c842d147c843b9821a9401ba9fc6c4f4
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T197F423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Adion djdecks v0.9.0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Adion djdecks v0.9.0.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Adion djdecks v0.9.0.exe
- Size 712KB
- SHA256 7d337564787120a82325d507ce709644c35343e1ca94ffcdb94a03e29886b27f
- MD5 41a8430c6ce726fa7e1652bb18c8a920
- SHA1 e348d961c63da799ecb4436317e69e74de18ac46
- SHA512 4819994dec366a0cd8eea080f32a0a5173747c0c0a2bc1ff9ce9ee53a95cf949e7d9776f79b2ba574f5338f6c4b12551c842d147c843b9821a9401ba9fc6c4f4
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T197F423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext