General
- Target jaffacakes118_c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a.bin
- Size 5.4MB
- Sample260911-hvfa2aszgz
- SHA256 c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a
- MD5 1f3917256ca9c71d17ee198da44a2c31
- SHA1 161eef8735bf7f577ba8a07f8a03b7544c49e74a
- SHA512 e08805257eb0b4ed523ac1bcc1f1183256b75347f216ebf73dd9c2fc700ad53ac8e722d40a2f842c00d4b7fcea917160c80574f2bfd70b317540e29231ff8d32
- SSDEEP 98304:0/s+YQ/2AU1nDuycv7XW2XjQq32yeDGWJ:0EBAanDuycj5QwnW
- TLSH T10A46232D33C79A48D53DD3B8CAB48DC667F0F94FAB60C71E759A23AC5A027826605713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a.bin
- Size 5.4MB
- SHA256 c468add27578d3119695ccf860bc9a38f0f40651a791dc9d832268e104b80b7a
- MD5 1f3917256ca9c71d17ee198da44a2c31
- SHA1 161eef8735bf7f577ba8a07f8a03b7544c49e74a
- SHA512 e08805257eb0b4ed523ac1bcc1f1183256b75347f216ebf73dd9c2fc700ad53ac8e722d40a2f842c00d4b7fcea917160c80574f2bfd70b317540e29231ff8d32
- SSDEEP 98304:0/s+YQ/2AU1nDuycv7XW2XjQq32yeDGWJ:0EBAanDuycj5QwnW
- TLSH T10A46232D33C79A48D53DD3B8CAB48DC667F0F94FAB60C71E759A23AC5A027826605713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Darktortilla crypter.
Family: Darktortilla
DarkTortilla is a highly configurable .NET based crypter that delivers a wide range of information stealers.
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.