General
- Target jaffacakes118_FlashFXP v.3.8 beta (3.7.8 build 1328) inkl. GE_2.exe
- Size 10.4MB
- Sample260910-fh3jpaycnf
- SHA256 f290a82695b0837cec9b9ebdd8f2b591c6e48a19a774864d97f112311810d83d
- MD5 0239e9310035e0f26920bb49635c89cf
- SHA1 23bd3e64d2de4d270da45af3ae9f5a0905422ac0
- SHA512 d9c43c1be7f5e1ba153bb158d65666ef2b2d95757e9c61b6b2f76d58fd0cdf2971e73c7628d8b0cc3cf3bf0f0430e0640fa74bc3fda198b33444de2e29a9ba0c
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvo:YX/KeBR/hly4YVY5
- TLSH T134B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_FlashFXP v.3.8 beta (3.7.8 build 1328) inkl. GE_2.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_FlashFXP v.3.8 beta (3.7.8 build 1328) inkl. GE_2.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_FlashFXP v.3.8 beta (3.7.8 build 1328) inkl. GE_2.exe
- Size 10.4MB
- SHA256 f290a82695b0837cec9b9ebdd8f2b591c6e48a19a774864d97f112311810d83d
- MD5 0239e9310035e0f26920bb49635c89cf
- SHA1 23bd3e64d2de4d270da45af3ae9f5a0905422ac0
- SHA512 d9c43c1be7f5e1ba153bb158d65666ef2b2d95757e9c61b6b2f76d58fd0cdf2971e73c7628d8b0cc3cf3bf0f0430e0640fa74bc3fda198b33444de2e29a9ba0c
- SSDEEP 12288:Yf//K/GBRLjhZDP4PyMRmakwVXF8ECC++nb3VfMjMLBdNs1g5GOw8KfgncPlqHvo:YX/KeBR/hly4YVY5
- TLSH T134B627391D6F5EE7F2E9CE31E5DC935138DB65322580B7AF7383020E066F581A4A8D1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext