General
- Target jaffacakes118_c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59.bin
- Size 52KB
- Sample260924-gh31wsfc72
- SHA256 c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59
- MD5 78dd523236043a7ac8c940c704e6be84
- SHA1 c7888805027dc5d458657326b6dacdea6d31c6da
- SHA512 54f495ca78bf427c626ac2181b8b3cf60cbffeaf59e6bb2c51764b57f56a9f02a01f8e59e66bd0e05a08c780c1924f972d497d31209489b56aa880f308066163
- SSDEEP 384:4sgm1G34512evqFo0fQeG0gfc/9X8EZTXTOF5T4DhPQRXQrYZon:0OGIn/qFodu9XFZTXTOF5T4DVcQk
- TLSH T1A033498F9D108AB3CEEE027979935F2B267E7D35130440B7DB2B56D41C79B9A08A4D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59.bin
- Size 52KB
- SHA256 c1b361d6b1865c6b61f372193b8a7be4eb6e481f1a7d9f6fd9fb030436d68a59
- MD5 78dd523236043a7ac8c940c704e6be84
- SHA1 c7888805027dc5d458657326b6dacdea6d31c6da
- SHA512 54f495ca78bf427c626ac2181b8b3cf60cbffeaf59e6bb2c51764b57f56a9f02a01f8e59e66bd0e05a08c780c1924f972d497d31209489b56aa880f308066163
- SSDEEP 384:4sgm1G34512evqFo0fQeG0gfc/9X8EZTXTOF5T4DhPQRXQrYZon:0OGIn/qFodu9XFZTXTOF5T4DVcQk
- TLSH T1A033498F9D108AB3CEEE027979935F2B267E7D35130440B7DB2B56D41C79B9A08A4D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory