General
- Target jaffacakes118_Free Ramdisk RRamdisk.exe
- Size 10.4MB
- Sample260910-ek4zvsxajc
- SHA256 08b99109f28d67cb8053dc2d7610b2001d7193285e533a6a2c97f05f15840d43
- MD5 6be231d66b7b49d72c0777588f183ee1
- SHA1 e5b47ebd04884892565fa553a825c3c7c65fbb03
- SHA512 ff71b4f0926d62015bf26bb37639be9f7ff8cbef512b88c12322247bb6a95fdcd65f1373720ce54257c0c481c09dcd8ef87df5713bcaf750a9ee853431bbbdf0
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvk:YX/KeBR/hly4YVYd
- TLSH T121B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Free Ramdisk RRamdisk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Free Ramdisk RRamdisk.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Free Ramdisk RRamdisk.exe
- Size 10.4MB
- SHA256 08b99109f28d67cb8053dc2d7610b2001d7193285e533a6a2c97f05f15840d43
- MD5 6be231d66b7b49d72c0777588f183ee1
- SHA1 e5b47ebd04884892565fa553a825c3c7c65fbb03
- SHA512 ff71b4f0926d62015bf26bb37639be9f7ff8cbef512b88c12322247bb6a95fdcd65f1373720ce54257c0c481c09dcd8ef87df5713bcaf750a9ee853431bbbdf0
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvk:YX/KeBR/hly4YVYd
- TLSH T121B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext