General
- Target jaffacakes118_SlySoft.AnyDVD.HD.v6.1.7.0.Multilanguage keygen.exe
- Size 518KB
- Sample260910-fm8lhaydqd
- SHA256 a9a199f3fb688d751af6155d76fc7fb6d4b2d64eb03d7e65a974e1733dde1776
- MD5 c6961d13eeb89c440cb28a0b180eef32
- SHA1 ac645fe5ae78a18b037c6896d602c53907ca9c0a
- SHA512 e02ab20dafe245593459cdc7ee5500b16a478b6f13400e6c4d8133787a096b5b9158e9814fb89f08cd53acef6ad06e995a3315bdb775c4f0ea0fbb8d5fc9f89d
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T127B423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_SlySoft.AnyDVD.HD.v6.1.7.0.Multilanguage keygen.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_SlySoft.AnyDVD.HD.v6.1.7.0.Multilanguage keygen.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_SlySoft.AnyDVD.HD.v6.1.7.0.Multilanguage keygen.exe
- Size 518KB
- SHA256 a9a199f3fb688d751af6155d76fc7fb6d4b2d64eb03d7e65a974e1733dde1776
- MD5 c6961d13eeb89c440cb28a0b180eef32
- SHA1 ac645fe5ae78a18b037c6896d602c53907ca9c0a
- SHA512 e02ab20dafe245593459cdc7ee5500b16a478b6f13400e6c4d8133787a096b5b9158e9814fb89f08cd53acef6ad06e995a3315bdb775c4f0ea0fbb8d5fc9f89d
- SSDEEP 6144:Mu3Zecer2C46OwQMz/Z/kpX1GZPpKwtblQ2Gae9qhQV2AjUwsGKfS:XAcert4fwQMrlkdFwbK2XeohAZsGKf
- TLSH T127B423BE7391D128E842C2300CB797AAD37BFD560E13CD9B2595B24ABC359429F35907
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext