General
- Target jaffacakes118_e71cd16e30d4f09ee04ccd1ad8645f29_JaffaCakes118
- Size 2.1MB
- Sample260915-vdp55ayvdv
- SHA256 02d771c18f61dc610582f58c2cf61f6e90f9065fcf96dee0a799de42e3915aa9
- MD5 e71cd16e30d4f09ee04ccd1ad8645f29
- SHA1 9679491381975a02c5b1f02d927bad09f999d792
- SHA512 c21d6910bf0d6e0b10e00b82a9869567e011011bf813c36812f0ff9a17fd52422c83a40870462795bae6ff758e245a855d7f220254b114c14ab3ee32eef33a50
- SSDEEP 49152:AXH5ecRU1pR5VQ7gpmxvuqar0y9ntZFU9Voo46GhLWRP9R/:A3MIU/jVQ7gpmxvux0ydnaV4jhyRP9R/
- TLSH T1E6A533BF592303F2661DFB98362FEB086C05EE556383A679915C25F0A773B3590B4CA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AC_III+16Tr-LNG.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
AC_III+16Tr-LNG.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
游侠网专题导航-游侠网中国单机游戏门户.url
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target AC_III+16Tr-LNG.exe
- Size 2.1MB
- SHA256 917e30f0560688d08fb8628aad45c5f7c0eee0a2ec9475a1e74153166c010c78
- MD5 726a4d113c6050ec23cfea804335fd17
- SHA1 d735e6e37f4e319997e22facc7a58e297d75adb4
- SHA512 7be3a2a821352fc94e1210c30d6f5068314ce77f238d440ccb982836cc77b7be2962024e71d14c72d858f3b4678d5fafd5658b3e3c2ca2a0c7c3045d648ac4ce
- SSDEEP 49152:mFKP4i6Y9H8zqW79fGSrbq6cakY+nzfiPL4dDuC3fOywhK4UhzG:mFKP4tY9cz1prm6NsfiPEdDugOfhUB
- TLSH T188A533A769EFD5D0EBBA9C74BCA3715E9EC095011BDEC717DBD42BDB9800A17A0881C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target 游侠网专题导航-游侠网中国单机游戏门户.url
- Size 186B
- SHA256 5eb82af4677fbd04c4762b42b9d97504dd9d3665e8437224501147a105113b18
- MD5 165d68468f133ac48cc8dc69ac680730
- SHA1 2d95ffc734ad0c38b6ca36203c053c47801a8435
- SHA512 c1330d7392585eaa1c9d0d063e3a6ac664aa64c6b09c0b4aab69330b6caa6950581a698a9400969e886a6ad7a336cd963199263ac5bddb707d29f2cbbfe93f60
- TLSH T1D4C0125C4619C158D607D64E21F2F804E81DB5D288FBC4DCB185CD5A5E445819495666
- MD5 SHA1 SHA512 TLSH
Score1/10