General
- Target jaffacakes118_db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9.bin
- Size 48KB
- Sample260924-fd2rlaeb78
- SHA256 db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9
- MD5 fa50bbe89b082a8e01575a26a0819fde
- SHA1 0f55b27eddeeb5502bb19de1ae61681b01eb6df3
- SHA512 04ea48ba5ef09af381a4b6734e2e9c7c32a0a0741e3b1cddfda3a55c23d435225256333013495335a53f88916cb6fdf767870f6408df6cbdb9f93fc88ae9541b
- SSDEEP 768:rynNgICOIOlFEm7SuL/AgD52Nat55fnsB:ryNJCIlFguLIgD3nfs
- TLSH T162235A83AA12D4B2C5DF043830BE7B232F7A5D35C2A6D4E3EBE31AC5587014B893651B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9.bin
- Size 48KB
- SHA256 db09563227159ab4a9e92328605937918407988ab34ebbf115313b937614b4f9
- MD5 fa50bbe89b082a8e01575a26a0819fde
- SHA1 0f55b27eddeeb5502bb19de1ae61681b01eb6df3
- SHA512 04ea48ba5ef09af381a4b6734e2e9c7c32a0a0741e3b1cddfda3a55c23d435225256333013495335a53f88916cb6fdf767870f6408df6cbdb9f93fc88ae9541b
- SSDEEP 768:rynNgICOIOlFEm7SuL/AgD52Nat55fnsB:ryNJCIlFguLIgD3nfs
- TLSH T162235A83AA12D4B2C5DF043830BE7B232F7A5D35C2A6D4E3EBE31AC5587014B893651B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory