General
- Target jaffacakes118_0day PACK 0623 sparksden.exe
- Size 10.4MB
- Sample260910-fekjpsybka
- SHA256 6e77949c9ee0ff837ed53b894d89f1e3e4aa50bfb0c343f14b15c621d53c6826
- MD5 3b4a9dd2350bb7025c7eaaefd43bb15c
- SHA1 fd75233cbf2ff8e5af3d894f9d8b33b860daa6d3
- SHA512 0d3b1cc5b3f778919e32a4c7097c4fc58eb8814d7c8b06a586828d8a17a02ed78f30743b05e138dde911c5e48b17cc115364460201062b29cb3022505d8a3122
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvG:YX/KeBR/hly4YVYT
- TLSH T1CFB627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_0day PACK 0623 sparksden.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_0day PACK 0623 sparksden.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_0day PACK 0623 sparksden.exe
- Size 10.4MB
- SHA256 6e77949c9ee0ff837ed53b894d89f1e3e4aa50bfb0c343f14b15c621d53c6826
- MD5 3b4a9dd2350bb7025c7eaaefd43bb15c
- SHA1 fd75233cbf2ff8e5af3d894f9d8b33b860daa6d3
- SHA512 0d3b1cc5b3f778919e32a4c7097c4fc58eb8814d7c8b06a586828d8a17a02ed78f30743b05e138dde911c5e48b17cc115364460201062b29cb3022505d8a3122
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvG:YX/KeBR/hly4YVYT
- TLSH T1CFB627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext