General
- Target jaffacakes118_72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2.bin
- Size 48KB
- Sample260924-nbwrkacb95
- SHA256 72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2
- MD5 480805eba868f967939028f956ffab2f
- SHA1 db707e76fa7945fd96ce7160120b6dd97dbb700b
- SHA512 a19e1dcf6ded05132c82589c5c0675a6fbacf589ae4be97291a6db8b83fb6704bfec4b14b9f15ff66e905367a8aa38dfc056b59588c3db1fe3150ff51cb8864d
- SSDEEP 384:So399vNgaA5vCeppp25nSFK1wqApct5JNGAS:5N1Ngacv7pynnwnat5vGA
- TLSH T192233A8756169CF2C7D9043834E361365FBA6E344B25A8E3EBF358CCAD314938930A17
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2.bin
- Size 48KB
- SHA256 72e42e25f3b0e036615c03bf79d4dfb6afa50bccd87c4b25d8c21c8b9eb381d2
- MD5 480805eba868f967939028f956ffab2f
- SHA1 db707e76fa7945fd96ce7160120b6dd97dbb700b
- SHA512 a19e1dcf6ded05132c82589c5c0675a6fbacf589ae4be97291a6db8b83fb6704bfec4b14b9f15ff66e905367a8aa38dfc056b59588c3db1fe3150ff51cb8864d
- SSDEEP 384:So399vNgaA5vCeppp25nSFK1wqApct5JNGAS:5N1Ngacv7pynnwnat5vGA
- TLSH T192233A8756169CF2C7D9043834E361365FBA6E344B25A8E3EBF358CCAD314938930A17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory