General
- Target jaffacakes118_370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45.bin
- Size 44KB
- Sample260924-nc13nscc34
- SHA256 370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45
- MD5 8d76a26b82be6bfdcf83371c19b59fe6
- SHA1 1d63abeffd999152124c27280ad2cbe37a04b7b5
- SHA512 f24be7d84dbb5b1610061ea753ba31f2de233c3e216459925e35a475f1019f7ac86e0e2456759978fd484dbd2db9e8c4fcd2275b7aa525cea3fc367410ab5211
- SSDEEP 384:NlTHMLTd9vNgy6qne7/SV7WEkj6VlKpct5x0S3QC:fjc1NgJ0Szj6Vcat5xtA
- TLSH T1FF133A8BA70444F2C3EE0D75286692365BBBAC3457179AC3CF3396859D306A86D3531B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45.bin
- Size 44KB
- SHA256 370ef1143d4501e84c403b9ecbd1f9b10d90d9c8cfa0c3fe40f568de56af5e45
- MD5 8d76a26b82be6bfdcf83371c19b59fe6
- SHA1 1d63abeffd999152124c27280ad2cbe37a04b7b5
- SHA512 f24be7d84dbb5b1610061ea753ba31f2de233c3e216459925e35a475f1019f7ac86e0e2456759978fd484dbd2db9e8c4fcd2275b7aa525cea3fc367410ab5211
- SSDEEP 384:NlTHMLTd9vNgy6qne7/SV7WEkj6VlKpct5x0S3QC:fjc1NgJ0Szj6Vcat5xtA
- TLSH T1FF133A8BA70444F2C3EE0D75286692365BBBAC3457179AC3CF3396859D306A86D3531B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory