General
- Target jaffacakes118_d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8.bin
- Size 44KB
- Sample260924-necsvscc75
- SHA256 d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8
- MD5 bf6bdad6cb8e97c45ecba7453f6b14fe
- SHA1 1311644d18d322de82af800bb5e14660695250a4
- SHA512 a939b9a3dc6971f10194b7893579c3abf8f39ee55d10ece368b1e0e59458ffb72281814aa3a97517c1c7b91f8d24bd4a2e740239840655d065f1474e056d9d2b
- SSDEEP 768:kombPNgB5rUzJ6eKKmauTiR9qhSRL7bAlI9C:kJbFw5rUzJ6eKKmauSL7bl
- TLSH T104132A4FA9608CB2D39A8438774A553B9FFB6930172689D3CB736AC45930EE49E31607
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8.bin
- Size 44KB
- SHA256 d25bfa7e9e3fbbaca7dcc30f0d8568073c3e67ae04f29d836333beae6eccf5a8
- MD5 bf6bdad6cb8e97c45ecba7453f6b14fe
- SHA1 1311644d18d322de82af800bb5e14660695250a4
- SHA512 a939b9a3dc6971f10194b7893579c3abf8f39ee55d10ece368b1e0e59458ffb72281814aa3a97517c1c7b91f8d24bd4a2e740239840655d065f1474e056d9d2b
- SSDEEP 768:kombPNgB5rUzJ6eKKmauTiR9qhSRL7bAlI9C:kJbFw5rUzJ6eKKmauSL7bl
- TLSH T104132A4FA9608CB2D39A8438774A553B9FFB6930172689D3CB736AC45930EE49E31607
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory