General
- Target jaffacakes118_f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214.bin
- Size 44KB
- Sample260924-e19v2sea27
- SHA256 f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214
- MD5 1fb9b1d8173eab7f1629e2e0b896582c
- SHA1 caef8bee7a9e4b2c9e6472d7252bfe22d5e9e45a
- SHA512 a48918dd5809e0fbc878d8e3de2de278ff98c4f24759c319db21d081cf724a02fbd16cff88c535905e47c11538358d97a9849b598eb8b4f62476e4aa8de4114b
- SSDEEP 768:YL8gpoOeNgP51ieaqIc0YkYTjLCYgudat5I:YL8gpoOII2NVCLgZ
- TLSH T1E5135D4F6642A0B2C4D906B531DF79276FBB2A3813A35DE7CB5F2E81297055A8C3C607
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214.bin
- Size 44KB
- SHA256 f29bd703cddcd78ef8eac2e9f7348b9b2e587a95efbce944d744d74a23a28214
- MD5 1fb9b1d8173eab7f1629e2e0b896582c
- SHA1 caef8bee7a9e4b2c9e6472d7252bfe22d5e9e45a
- SHA512 a48918dd5809e0fbc878d8e3de2de278ff98c4f24759c319db21d081cf724a02fbd16cff88c535905e47c11538358d97a9849b598eb8b4f62476e4aa8de4114b
- SSDEEP 768:YL8gpoOeNgP51ieaqIc0YkYTjLCYgudat5I:YL8gpoOII2NVCLgZ
- TLSH T1E5135D4F6642A0B2C4D906B531DF79276FBB2A3813A35DE7CB5F2E81297055A8C3C607
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory