General
- Target jaffacakes118_bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf.bin
- Size 52KB
- Sample260924-mt5xhsbf84
- SHA256 bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf
- MD5 cb6c43ec76aa8cb17d79780f4347e3c0
- SHA1 15dbdb6758c8de61a940ebb6245daa3498f551c0
- SHA512 2918e60ac62f92f0793c7f809ade7013c760d91af04c7c352d9a1f49effed678ebdc51b9aad90ef3100f76e606a18c2318038ccde31bf3ecc8507f3ec42b9c01
- SSDEEP 768:160HXRiqFz09SkeQPRqMrQVuifC9anOn:16sRLiA1w4F
- TLSH T1FA334A0FD600F8B3D2AA82743E546E2B697F3C36111408EBD7279BD06C64A5D88A0F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf.bin
- Size 52KB
- SHA256 bea51f6e2b76333cb39f756cc186846ff32b1a319fe2e5d11f4e6dab6c8e9bcf
- MD5 cb6c43ec76aa8cb17d79780f4347e3c0
- SHA1 15dbdb6758c8de61a940ebb6245daa3498f551c0
- SHA512 2918e60ac62f92f0793c7f809ade7013c760d91af04c7c352d9a1f49effed678ebdc51b9aad90ef3100f76e606a18c2318038ccde31bf3ecc8507f3ec42b9c01
- SSDEEP 768:160HXRiqFz09SkeQPRqMrQVuifC9anOn:16sRLiA1w4F
- TLSH T1FA334A0FD600F8B3D2AA82743E546E2B697F3C36111408EBD7279BD06C64A5D88A0F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory