General
- Target jaffacakes118_3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3.bin
- Size 48KB
- Sample260924-e4hwqs1w7r
- SHA256 3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3
- MD5 2f5c0748eab1f300b4337b8ae11ebd08
- SHA1 dd8b7d20fa5817191dc3781970201f50232abab5
- SHA512 929f39db6e14208201c73fd07ed80aa4accac8586aceb3225b52d24fbac1e76a830744f0731ab32a6f967dbf7ec81471498d4d3efee30f0de3a2ccd9f4525c39
- SSDEEP 768:OcGAMYNgEB/MiozSMyBKyGccwhuOubHat5OxLBHo0:sAMWvB/MioABK8uLa0Vho
- TLSH T194236C46A621A8F2C6DF013034BF37260AB76D34967EC8E3CAE72E459CB13535475807
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3.bin
- Size 48KB
- SHA256 3f6a1ab210398cb52c676fe4b05153cb62d2e0c3ed319d956c17b6403a18f4f3
- MD5 2f5c0748eab1f300b4337b8ae11ebd08
- SHA1 dd8b7d20fa5817191dc3781970201f50232abab5
- SHA512 929f39db6e14208201c73fd07ed80aa4accac8586aceb3225b52d24fbac1e76a830744f0731ab32a6f967dbf7ec81471498d4d3efee30f0de3a2ccd9f4525c39
- SSDEEP 768:OcGAMYNgEB/MiozSMyBKyGccwhuOubHat5OxLBHo0:sAMWvB/MioABK8uLa0Vho
- TLSH T194236C46A621A8F2C6DF013034BF37260AB76D34967EC8E3CAE72E459CB13535475807
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory