General
- Target jaffacakes118_3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5.bin
- Size 48KB
- Sample260924-gpv9mafd64
- SHA256 3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5
- MD5 1bcb48c50019bd47cf2117593a67a267
- SHA1 453d703b7dfc86c133eb3763bd02e993b360703f
- SHA512 538cf87bed0eb43b67b15ee02a3f6dd1b3624840c761cdbbb746a3d76aee655c62558e1769277df2ef593d33de18a6015ab915da7dff0eebc217412a8a1e3cec
- SSDEEP 768:IYxTDQceJZYSZcEaNNTI9UNRRKBUTsTyQTV+vrgSlsw:tTDeJaqcEaNN9RKt+vrnls
- TLSH T1F6234B4B61005AF2C2D8C87839C3AB1B66EE6D34031A24A3DFB755C94F6958F79A2D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5.bin
- Size 48KB
- SHA256 3d4b16c251489d57edb3112833e8dd1a78f74b82de51d53c0a690935bd10a0c5
- MD5 1bcb48c50019bd47cf2117593a67a267
- SHA1 453d703b7dfc86c133eb3763bd02e993b360703f
- SHA512 538cf87bed0eb43b67b15ee02a3f6dd1b3624840c761cdbbb746a3d76aee655c62558e1769277df2ef593d33de18a6015ab915da7dff0eebc217412a8a1e3cec
- SSDEEP 768:IYxTDQceJZYSZcEaNNTI9UNRRKBUTsTyQTV+vrgSlsw:tTDeJaqcEaNN9RKt+vrnls
- TLSH T1F6234B4B61005AF2C2D8C87839C3AB1B66EE6D34031A24A3DFB755C94F6958F79A2D07
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory