General
- Target jaffacakes118__9874c19e5564de019520bdfe66b0187e
- Size 128KB
- Sample260919-rmgcssgc58
- SHA256 5946f07c5f2bdbae314098274ef0a4247d4bbbc6f01e6c1a302fcb8bb0440fdd
- MD5 9874c19e5564de019520bdfe66b0187e
- SHA1 d1f252d881546f8b2b0055387474b12ded033223
- SHA512 b838692c97808c5c20faf0b07b1bf1b86da4ab88f3f7b7072aa2d0d12290e8f9c4762293fdbef82aac9bbe8bf4cbd47b64dc7d302235c4ec69aaeda1dbd83ac6
- SSDEEP 3072:HO+BeMrTTzbJ7GU7qdwcUBL0WuAhSzb3/E3Towsr+bpmbXbAkld6:HO+BpjzbJGU2U90WuAwb3oU8mbrJd6
- TLSH T18CD3381763444435E57B0136220B7A72D9F8FC3021226843FBDC9AA69E7EDD2D9663E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118__9874c19e5564de019520bdfe66b0187e.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__9874c19e5564de019520bdfe66b0187e.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__9874c19e5564de019520bdfe66b0187e
- Size 128KB
- SHA256 5946f07c5f2bdbae314098274ef0a4247d4bbbc6f01e6c1a302fcb8bb0440fdd
- MD5 9874c19e5564de019520bdfe66b0187e
- SHA1 d1f252d881546f8b2b0055387474b12ded033223
- SHA512 b838692c97808c5c20faf0b07b1bf1b86da4ab88f3f7b7072aa2d0d12290e8f9c4762293fdbef82aac9bbe8bf4cbd47b64dc7d302235c4ec69aaeda1dbd83ac6
- SSDEEP 3072:HO+BeMrTTzbJ7GU7qdwcUBL0WuAhSzb3/E3Towsr+bpmbXbAkld6:HO+BpjzbJGU2U90WuAwb3oU8mbrJd6
- TLSH T18CD3381763444435E57B0136220B7A72D9F8FC3021226843FBDC9AA69E7EDD2D9663E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UAC bypass
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
4