General
- Target jaffacakes118__9e71d14861a27930de5738cf2dda8034
- Size 235KB
- Sample260919-tqlssstyhv
- SHA256 fd8ecd502b1ce2fda53b1ed29fbe3512ccfae5ea76311ef66dbfd0ee2aab97b9
- MD5 9e71d14861a27930de5738cf2dda8034
- SHA1 09a7d1ef7d06d0314fc51d9b71ea43844e5fa43b
- SHA512 b4cdbeb839d9df9eedcb1e3c1cf5841a51d3a133f67a683c6a99c7e231d6557fd5dfc5c5cced8de03af6ab7a2f60846d82fff0187b54df654c812a674efd5d84
- SSDEEP 6144:8xrvO0KEgVZ1sL2Dl4Zo5V6wag4PNCFPK6chxPfmgHaLyPy8:8xjeEgV7sL2DCZo5VxaZCFPK6chxPZPy
- TLSH T143341226DAF88851E2FD67B24B51FB151B0DDBF24F479A3740B4B2BB18C0436490EA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
jaffacakes118__9e71d14861a27930de5738cf2dda8034.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__9e71d14861a27930de5738cf2dda8034.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__9e71d14861a27930de5738cf2dda8034
- Size 235KB
- SHA256 fd8ecd502b1ce2fda53b1ed29fbe3512ccfae5ea76311ef66dbfd0ee2aab97b9
- MD5 9e71d14861a27930de5738cf2dda8034
- SHA1 09a7d1ef7d06d0314fc51d9b71ea43844e5fa43b
- SHA512 b4cdbeb839d9df9eedcb1e3c1cf5841a51d3a133f67a683c6a99c7e231d6557fd5dfc5c5cced8de03af6ab7a2f60846d82fff0187b54df654c812a674efd5d84
- SSDEEP 6144:8xrvO0KEgVZ1sL2Dl4Zo5V6wag4PNCFPK6chxPfmgHaLyPy8:8xjeEgV7sL2DCZo5VxaZCFPK6chxPZPy
- TLSH T143341226DAF88851E2FD67B24B51FB151B0DDBF24F479A3740B4B2BB18C0436490EA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Change Default File Association
1