General
- Target jaffacakes118_fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a.bin
- Size 44KB
- Sample260924-3xa5bats2m
- SHA256 fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a
- MD5 45ebf7d0566bf28aa462d921d31cbe56
- SHA1 19497282e1352d3d7c259907e98cf1dffcf1c6c7
- SHA512 bce9fb6c7fc75c6d3bf71d32889138840867a32907f7d001a9932e6640225182add2e13c59cd33954e31b1d8d5175192601f296cb1666473e3a0f0dab176e3e1
- SSDEEP 768:c2BNg2FGGcPe42BnV5TdUq0at5JxLBHTXH:c2j3oPe42RZUInVhL
- TLSH T111134986BB04C4B3C2FB05F9653A663A5E7B6D3106328DA7EBB326C02C241519D3562F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a.bin
- Size 44KB
- SHA256 fe5a6ff799f77e036fe55aa099f1bd517c4040e93b3795093fc22e9463e0fd9a
- MD5 45ebf7d0566bf28aa462d921d31cbe56
- SHA1 19497282e1352d3d7c259907e98cf1dffcf1c6c7
- SHA512 bce9fb6c7fc75c6d3bf71d32889138840867a32907f7d001a9932e6640225182add2e13c59cd33954e31b1d8d5175192601f296cb1666473e3a0f0dab176e3e1
- SSDEEP 768:c2BNg2FGGcPe42BnV5TdUq0at5JxLBHTXH:c2j3oPe42RZUInVhL
- TLSH T111134986BB04C4B3C2FB05F9653A663A5E7B6D3106328DA7EBB326C02C241519D3562F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory