General
- Target jaffacakes118_email-with-malware-attachment.eml
- Size 1.9MB
- Sample260910-w79bjaw1aw
- SHA256 cdcda582418ce278869dd857d57d7b493d380a7c0532c0f36ced8d73a176d124
- MD5 936456aef75cf34b3306effc087e4e77
- SHA1 d5757e554659949efff045b77faf6a291023a541
- SHA512 bb1f730352a777e4d7843695780b658c9829fd76cde3a0578ebf38c9ef19e65e0fa8d7192ed0239157470fdc51080fbe6a947287e4c5f333848bc656c1359bae
- SSDEEP 24576:3TRJG8I18RkGXbJLTpsL5/XL5bv/MZZgMUsv/KON3+YUkgePSTRnsPQqHCZzIy9e:3uJ8RndiZgtU2KZNTRnsYLK/Ayz
- TLSH T14B9523A8DA965BDD0C10A6F6B403F48431EE27CB1C47831243FDD6A171F58A95BE2E63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KTMBE25040170.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
KTMBE25040170.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target KTMBE25040170.exe
- Size 1.4MB
- SHA256 116c096a488f53b298d3bac99942770afd3d791ae376534f050e6e4642c2fbb4
- MD5 4f475ce89de8c65bec36c9d9a01fe0f0
- SHA1 d9853bd44d2e32d89eaf10595a3d65be9190b91a
- SHA512 2083f5c720b3283f3ab2c13a19294f586fbb984fa06cfb354e3b492f259077cc1be13d4b7dac4f261cabc379093e2c1e4160004df343ac185255d0d4d3f88d04
- SSDEEP 24576:JIbw1I5s97DYzBmvHLDkUxFRCaVhHbZCjrRvJ0Jrq3GWZXvTHhq6QPXzNCo:gw1IGFYFmsU4anAjROr6HLBq6jo
- TLSH T18E6523837BEEC861C9158B32EE2BD4004735D65DB163D6987EDE539B080FB9E8612B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Suspicious use of SetThreadContext