General
- Target jaffacakes118_2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d.bin
- Size 1.2MB
- Sample260911-mbpgtavsfw
- SHA256 2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d
- MD5 6df77b31f62207d3933e4f7cb952631f
- SHA1 be36a5200fea81a9a7f9ae0f3a859d0b146bd9b0
- SHA512 310e7f903edd9bd2bcff1acb176cea24a4614e62ddba228a38e5a42d0caa5b0449fa596c72c9c5f175fabdf1ae9d4bbbc6f7d3600db6924d62493b99894a55cb
- SSDEEP 24576:D7INGEVNoOkb4wfgebYPwd1WJn+UfuA7IPR:n0honYPu10+XR
- TLSH T19F559D956BD426A8E6799F38A8351CC04BF2F2F683F0EE691BD451878F7B3414A112D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d.bin
- Size 1.2MB
- SHA256 2234159417129ec303394a14cba991762d972e88020fb0fe2a8838392db9234d
- MD5 6df77b31f62207d3933e4f7cb952631f
- SHA1 be36a5200fea81a9a7f9ae0f3a859d0b146bd9b0
- SHA512 310e7f903edd9bd2bcff1acb176cea24a4614e62ddba228a38e5a42d0caa5b0449fa596c72c9c5f175fabdf1ae9d4bbbc6f7d3600db6924d62493b99894a55cb
- SSDEEP 24576:D7INGEVNoOkb4wfgebYPwd1WJn+UfuA7IPR:n0honYPu10+XR
- TLSH T19F559D956BD426A8E6799F38A8351CC04BF2F2F683F0EE691BD451878F7B3414A112D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Darktortilla crypter.
-
Family: Darktortilla
DarkTortilla is a highly configurable .NET based crypter that delivers a wide range of information stealers.
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.