General
- Target jaffacakes118_2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34.bin
- Size 910KB
- Sample260911-mbrbeavsfy
- SHA256 2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34
- MD5 be85d01ac1659416095167f071efbfbe
- SHA1 ac8094a1eab8858084dd6f2cea4da55dd64bf1cf
- SHA512 e360cfee7ffc5d5990550d1c4f3f0cc149d9860204e6f58e8946d534dab74d945c861fb8838dca35b5f539c3638326939f7968cad1b691f845b55b2ab59ab2e4
- SSDEEP 12288:l7I61t5eNJ4hQO2RCqVl/iOkEbNZCFkbigwaFSM9DoEH2wgCSyB++eH8R:l7INGEVNDEkbXr+22W8+ecR
- TLSH T1EA157D8467D42AA8E679AB38A8351C804BF5F6F6C3F0ED296FD494474F7B7814A112C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34.bin
- Size 910KB
- SHA256 2eba126064eb79980aefe2b1efa1687864acbbce6e7d443bfa17d8532c0e9c34
- MD5 be85d01ac1659416095167f071efbfbe
- SHA1 ac8094a1eab8858084dd6f2cea4da55dd64bf1cf
- SHA512 e360cfee7ffc5d5990550d1c4f3f0cc149d9860204e6f58e8946d534dab74d945c861fb8838dca35b5f539c3638326939f7968cad1b691f845b55b2ab59ab2e4
- SSDEEP 12288:l7I61t5eNJ4hQO2RCqVl/iOkEbNZCFkbigwaFSM9DoEH2wgCSyB++eH8R:l7INGEVNDEkbXr+22W8+ecR
- TLSH T1EA157D8467D42AA8E679AB38A8351C804BF5F6F6C3F0ED296FD494474F7B7814A112C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Darktortilla crypter.
-
Family: Darktortilla
DarkTortilla is a highly configurable .NET based crypter that delivers a wide range of information stealers.
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.