General
- Target jaffacakes118_eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275.bin
- Size 44KB
- Sample260924-nnkvtsce99
- SHA256 eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275
- MD5 36c5ff697fb34b3c42c729df1a812efc
- SHA1 3780c13c1f1bd1710c805fa62f6efe9049c35964
- SHA512 5616fbc9d520d6d74653517688421ca9c278a80232ac7a0945a137fce0bd1017a0e2f9e2d6b2890e941f9af3ac1678a9a7029ba7ab35e19fa55dd29ccb3cd9a4
- SSDEEP 384:/Djc93vNgBY26uvAnxB2MVUx9LH8Xe4Ypct5TGGgGu+BG9yQM:7jOfNgBY2652MWMeRat5TGvGuKGwQ
- TLSH T107134B479A24D8B2C3ED4478725B163B4FAF6D3517A28E97CBB316C40C358A66E3053B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275.bin
- Size 44KB
- SHA256 eea16c8bb06c676ab8cdc39b1d3f3912336183b6439ed61cf3f1953c2e025275
- MD5 36c5ff697fb34b3c42c729df1a812efc
- SHA1 3780c13c1f1bd1710c805fa62f6efe9049c35964
- SHA512 5616fbc9d520d6d74653517688421ca9c278a80232ac7a0945a137fce0bd1017a0e2f9e2d6b2890e941f9af3ac1678a9a7029ba7ab35e19fa55dd29ccb3cd9a4
- SSDEEP 384:/Djc93vNgBY26uvAnxB2MVUx9LH8Xe4Ypct5TGGgGu+BG9yQM:7jOfNgBY2652MWMeRat5TGvGuKGwQ
- TLSH T107134B479A24D8B2C3ED4478725B163B4FAF6D3517A28E97CBB316C40C358A66E3053B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory