General
- Target jaffacakes118_7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14.bin
- Size 14.0MB
- Sample260910-ye7cksee25
- SHA256 7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14
- MD5 fdc4d5e4f74082fb4c9d9d3f999fcd24
- SHA1 cffdbfc7461f7cbc4f5db6e8e069e2d9c4a9e0b0
- SHA512 96c85c6e850b90d26ee6392acbc153aeda637072e372d3311fbe70a688b5ec1321314453db16d6ebdedd1137daed71e13b2e237e3f1f7447ce5399b93d2de380
- SSDEEP 196608:7stUoCK/arIMQju5jmppqIFVXGD0sxD1I6QxH1WrE7+E9060NVxUBby6KA:7LoCKJu5jupFVXGD0s07MrR407VxAby
- TLSH T193E633AB19EB41EBD9C01CB0672FBBE723B35A440D864C357DC5394D60B6FB5202B986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14.bin
- Size 14.0MB
- SHA256 7bb36d9dcae186a711a24c1f1b04bbeabd6349372c9ff0916ee595b2bd83eb14
- MD5 fdc4d5e4f74082fb4c9d9d3f999fcd24
- SHA1 cffdbfc7461f7cbc4f5db6e8e069e2d9c4a9e0b0
- SHA512 96c85c6e850b90d26ee6392acbc153aeda637072e372d3311fbe70a688b5ec1321314453db16d6ebdedd1137daed71e13b2e237e3f1f7447ce5399b93d2de380
- SSDEEP 196608:7stUoCK/arIMQju5jmppqIFVXGD0sxD1I6QxH1WrE7+E9060NVxUBby6KA:7LoCKJu5jupFVXGD0s07MrR407VxAby
- TLSH T193E633AB19EB41EBD9C01CB0672FBBE723B35A440D864C357DC5394D60B6FB5202B986
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger