General
- Target jaffacakes118_c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d.bin
- Size 228KB
- Sample260924-cbcsxabf38
- SHA256 c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d
- MD5 4211b2f91eed601b00bde2096288016b
- SHA1 da669087d967a1424acd8487526209b27ea803a0
- SHA512 43c001d2bcfa98aa8302b36c2c724f840639c45ce46321e71f6924a04e54ba49f197b771d5f84867980565594cdc1d5a5df68cc71019e8289061ee385fbd5bc7
- SSDEEP 6144:3VZ7KDISFJ80ruSvB/7oSMpoSDoSyoSY9e0uQZZEoSr:QIgbToS2oSDoSyoS+4oS
- TLSH T16C34B01332D8CCF7D06A01300DE66F3A9AB5FD344D62865767D8B21F5D79B908A293A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d.bin
- Size 228KB
- SHA256 c0e0857ab2e201ca0e0236ce65e621cedbce52e1e9842c8707be5c8fb05c659d
- MD5 4211b2f91eed601b00bde2096288016b
- SHA1 da669087d967a1424acd8487526209b27ea803a0
- SHA512 43c001d2bcfa98aa8302b36c2c724f840639c45ce46321e71f6924a04e54ba49f197b771d5f84867980565594cdc1d5a5df68cc71019e8289061ee385fbd5bc7
- SSDEEP 6144:3VZ7KDISFJ80ruSvB/7oSMpoSDoSyoSY9e0uQZZEoSr:QIgbToS2oSDoSyoS+4oS
- TLSH T16C34B01332D8CCF7D06A01300DE66F3A9AB5FD344D62865767D8B21F5D79B908A293A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon
-
Drops file in System32 directory