General
- Target jaffacakes118_c2bb37415047e9c18ef3ee2f36f40290c4a5a04856ae2c2f7e277ed3c45422e6.bin
- Size 117KB
- Sample260912-nc2n7svfkb
- SHA256 c2bb37415047e9c18ef3ee2f36f40290c4a5a04856ae2c2f7e277ed3c45422e6
- MD5 58c2329e498ef2c28743c8a579f35567
- SHA1 4c978b8712ef199587a9186b95911b25c6309efa
- SHA512 19c84b0fdd828e8eb8a02b1e2ef0cb6c94a69dea67184c93337ad04f32d99f9f401a01e14089bd96f8f1e13d7e6f6484d8fddfc6ee0badf27551232dc09da86b
- SSDEEP 3072:3Zaw3KpIrvMCtPGFG87D9EbEvpDc2BqEJtJxlbZ:v3K0pgG87DqwV4wfxlbZ
- TLSH T109C3121FC2EA2E19C4805AA081D57EBBFE055C215FE25F9237A59721061027BC9DBFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
EXM-Tweaking-Utility-Premium-main/EXM Free Tweaking Utility V8.3 LEAKED 2025.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
EXM-Tweaking-Utility-Premium-main/EXM Free Tweaking Utility V8.3 LEAKED 2025.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
EXM-Tweaking-Utility-Premium-main/EXM Premium Tweaking Utility 1.0 Cracked.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
EXM-Tweaking-Utility-Premium-main/EXM Premium Tweaking Utility 1.0 Cracked.bat
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target EXM-Tweaking-Utility-Premium-main/EXM Free Tweaking Utility V8.3 LEAKED 2025.bat
- Size 671KB
- SHA256 1c9ed30b893b83b29d285cc8b37bdba353ab18dab8288e44a367162fb536c609
- MD5 483423f13894ad21cd9c37a2a5adae19
- SHA1 fe6bb76d64a8df56318db98c3fc9c471bacaa82c
- SHA512 5f050acfcedbaf60bde9c0e028a7685a520e284ca17cd0b52c28a94dde75948324bc0738a5ba965ca26e39e55c6861af63bef23546af2b074a7940e329e719c6
- SSDEEP 3072:uGzQbmbkAqA2xH7VkKEn14IZVvisLur+K3:uGiVNEn14IZVvisL43
- TLSH T13FE42E10A52A0272C6D5ED25AA73CD166F77BEC3E4404B10B4AEB1CE0FB7542DCBA6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
- Target EXM-Tweaking-Utility-Premium-main/EXM Premium Tweaking Utility 1.0 Cracked.bat
- Size 672KB
- SHA256 16431cc14917abeb316e0bc44045440a8f86b7ac4fdd0dce99de6435d493ecca
- MD5 f9ca73d63fe61c4c401528fb470ce08e
- SHA1 584f69b507ddf33985673ee612e6099aff760fb1
- SHA512 6fd03320ec84baf09a16a127c2c0ed3c265906fcb1a3b807c13001e775c396b66539238392438a8f290be04b8b8684050736331f8f99dbe8b868b44f154dd9de
- SSDEEP 3072:BIGzQbmbkAqA2xH7VkKEn14IZVvisLur+K3:BIGiVNEn14IZVvisL43
- TLSH T16EE42F10A52A0272C6D5ED25AA73CD166F77BEC3E4404B10B4AEB1CE0FB7542DCBA6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1