General
- Target jaffacakes118__9d7ef7558c47de6d2d3e5ac1ba1d79db
- Size 7KB
- Sample260919-tekrcsdm61
- SHA256 415f677eb852a0787634f3b30cba0214343407eb4685c5376f4ec687599d55df
- MD5 9d7ef7558c47de6d2d3e5ac1ba1d79db
- SHA1 0d88535859b4a9b21a532bd438a3cc27cf1f8d82
- SHA512 1898f17fbf147303a8ddfa2c55ee87c1fbba820f0ca77f93a349c755db29797ab0851a05a86d742a8fcb57ac24dda2e7979d4db87d4ff255936ce75ee463a341
- SSDEEP 192:xyfPBSyFnTQflbSFiY7j3B+xzTvD8TPLddiCib1jw:x2JQflOR7j3B+lTvYjLzi
- TLSH T135E19E88C351B4F4F829007F1652A14673F5E3E9D16E9E1E8BC0A940ECD485676C7CD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__9d7ef7558c47de6d2d3e5ac1ba1d79db.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__9d7ef7558c47de6d2d3e5ac1ba1d79db.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__9d7ef7558c47de6d2d3e5ac1ba1d79db
- Size 7KB
- SHA256 415f677eb852a0787634f3b30cba0214343407eb4685c5376f4ec687599d55df
- MD5 9d7ef7558c47de6d2d3e5ac1ba1d79db
- SHA1 0d88535859b4a9b21a532bd438a3cc27cf1f8d82
- SHA512 1898f17fbf147303a8ddfa2c55ee87c1fbba820f0ca77f93a349c755db29797ab0851a05a86d742a8fcb57ac24dda2e7979d4db87d4ff255936ce75ee463a341
- SSDEEP 192:xyfPBSyFnTQflbSFiY7j3B+xzTvD8TPLddiCib1jw:x2JQflOR7j3B+lTvYjLzi
- TLSH T135E19E88C351B4F4F829007F1652A14673F5E3E9D16E9E1E8BC0A940ECD485676C7CD6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Shared Task Scheduler registry keys
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Loads dropped DLL
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1