General
- Target jaffacakes118_[lightingspeeds com] Geek Squad Mri 5 02k Quasar.exe
- Size 10.4MB
- Sample260910-fgqhqsfe92
- SHA256 6f238e95b991b128980191dab0b3d8f546c284589fbd54e3845cf03a3a0dde70
- MD5 42df0df49c18b96a07d91fe080969865
- SHA1 a34f0f717964ab18fad5c50885072401f592f2d8
- SHA512 6f2434eb2fc5b4cd4650e3526768aefd045f29ee8f78a3a681b4f521e70ec7dbb776c25cb172e637b1102fc2435e2a0403f42a7f1a8e175c9f7dc18795b1b485
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvC:YX/KeBR/hly4YVYx
- TLSH T136B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_[lightingspeeds com] Geek Squad Mri 5 02k Quasar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_[lightingspeeds com] Geek Squad Mri 5 02k Quasar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_[lightingspeeds com] Geek Squad Mri 5 02k Quasar.exe
- Size 10.4MB
- SHA256 6f238e95b991b128980191dab0b3d8f546c284589fbd54e3845cf03a3a0dde70
- MD5 42df0df49c18b96a07d91fe080969865
- SHA1 a34f0f717964ab18fad5c50885072401f592f2d8
- SHA512 6f2434eb2fc5b4cd4650e3526768aefd045f29ee8f78a3a681b4f521e70ec7dbb776c25cb172e637b1102fc2435e2a0403f42a7f1a8e175c9f7dc18795b1b485
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvC:YX/KeBR/hly4YVYx
- TLSH T136B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext