General
- Target jaffacakes118_Games xcopy COLZY [heavens above biz.exe
- Size 10.4MB
- Sample260910-fg7f9agm4w
- SHA256 d231c034005b29578208aae1f4f254f67b621291096932ef32c6427d084cf254
- MD5 597dee7e2b0e66213bbd80fa307fb27f
- SHA1 88873e9f0b2efdfb60a3fc770270661d15d09d3e
- SHA512 d40f6f5ce7849cd998bb3fe07c188370f49deed6a31422d876c0d323ec2f62186580f41aa285fe7677ae2661db0544c0426a640e5183bfac0132780f095dc1ea
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvo:YX/KeBR/hly4YVYF
- TLSH T148B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Games xcopy COLZY [heavens above biz.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Games xcopy COLZY [heavens above biz.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Games xcopy COLZY [heavens above biz.exe
- Size 10.4MB
- SHA256 d231c034005b29578208aae1f4f254f67b621291096932ef32c6427d084cf254
- MD5 597dee7e2b0e66213bbd80fa307fb27f
- SHA1 88873e9f0b2efdfb60a3fc770270661d15d09d3e
- SHA512 d40f6f5ce7849cd998bb3fe07c188370f49deed6a31422d876c0d323ec2f62186580f41aa285fe7677ae2661db0544c0426a640e5183bfac0132780f095dc1ea
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvo:YX/KeBR/hly4YVYF
- TLSH T148B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext