General
- Target jaffacakes118_Folder Tag 1 0 0 By QuackWare (www Quack Ware com).exe
- Size 10.4MB
- Sample260910-eqtfbay1fw
- SHA256 4251b8d98741ae33bdc4e1e9f0e9fb8740b2fa71589958ce93bb6a18624c285c
- MD5 8b1849974d9ecb3224f963b9905cb87e
- SHA1 0c4e68517e97c248b76d55bf30e9fd6f4f07e6c6
- SHA512 aaa32a974ca0a92022c5cf55a831802a6b63db0b5f571b0f0408b904d720caeee2ce8018dd0257bbf0024648dcd4eacfa537f38b7b5ad6bc639572dfbadedbfd
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvj:YX/KeBR/hly4YVYu
- TLSH T192B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Folder Tag 1 0 0 By QuackWare (www Quack Ware com).exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Folder Tag 1 0 0 By QuackWare (www Quack Ware com).exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Folder Tag 1 0 0 By QuackWare (www Quack Ware com).exe
- Size 10.4MB
- SHA256 4251b8d98741ae33bdc4e1e9f0e9fb8740b2fa71589958ce93bb6a18624c285c
- MD5 8b1849974d9ecb3224f963b9905cb87e
- SHA1 0c4e68517e97c248b76d55bf30e9fd6f4f07e6c6
- SHA512 aaa32a974ca0a92022c5cf55a831802a6b63db0b5f571b0f0408b904d720caeee2ce8018dd0257bbf0024648dcd4eacfa537f38b7b5ad6bc639572dfbadedbfd
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvj:YX/KeBR/hly4YVYu
- TLSH T192B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext