General
- Target jaffacakes118_66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb.bin
- Size 52KB
- Sample260924-glcccafc95
- SHA256 66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb
- MD5 d104b0b2d2d24f3e1cfe83bad6ea33fb
- SHA1 d57ce8fa84327c017ec19d74f65a8335801a00bc
- SHA512 e6843e53355832615c43d0aa99702b5141e3fca016a077f98589fd1a4347e9ba194951b866af4851d03079671f3d9c8819a205baf410f03bb1cd5dfbf22fddbc
- SSDEEP 768:MEhO0P4rvTtSpgo37y98u0bITiT+0/+TJYwu/L5z:NhB4rJIgo37BuuFd
- TLSH T1B833184F6E00DAF2CA9A8634BC876F0F26AF7C35111510BBEB6758D9587CB8A49C4D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb.bin
- Size 52KB
- SHA256 66ceda5323e7e2b649e8ac4d3f616083b6f89353a8e3aad26a6e151d91a2f3bb
- MD5 d104b0b2d2d24f3e1cfe83bad6ea33fb
- SHA1 d57ce8fa84327c017ec19d74f65a8335801a00bc
- SHA512 e6843e53355832615c43d0aa99702b5141e3fca016a077f98589fd1a4347e9ba194951b866af4851d03079671f3d9c8819a205baf410f03bb1cd5dfbf22fddbc
- SSDEEP 768:MEhO0P4rvTtSpgo37y98u0bITiT+0/+TJYwu/L5z:NhB4rJIgo37BuuFd
- TLSH T1B833184F6E00DAF2CA9A8634BC876F0F26AF7C35111510BBEB6758D9587CB8A49C4D07
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory