General
- Target jaffacakes118_ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb.bin
- Size 48KB
- Sample260925-2cl6ea1tdx
- SHA256 ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb
- MD5 81af0c92731814901a94b28cf99b4c60
- SHA1 bbf297ecbbffd5055bb109c817ded9905a86a346
- SHA512 3f48cd8d5d9f0dfcaa3698f7c7960f557ba078b15a77e50e8fb8b0dd452606fb6ffbbb7a09d69a524727bdc4193d05cabf727df8559c5b9336340b3179907e52
- SSDEEP 384:JcY4EpuTCvqF76QWXgAecrnjVYpGNk2scMbmC5lSnpct5Yl:6W6WqFh2gYipGNk2scMCC5Ynat5
- TLSH T1E4233B466A0558F2C9EE0934309BA5275FFD5E3436FB50EBCAEBA9DC6E30047E014E16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb.bin
- Size 48KB
- SHA256 ea41a3cacdf68fc7e0884de7982fe8cf38178e1dc68b6929ceea47fc404943bb
- MD5 81af0c92731814901a94b28cf99b4c60
- SHA1 bbf297ecbbffd5055bb109c817ded9905a86a346
- SHA512 3f48cd8d5d9f0dfcaa3698f7c7960f557ba078b15a77e50e8fb8b0dd452606fb6ffbbb7a09d69a524727bdc4193d05cabf727df8559c5b9336340b3179907e52
- SSDEEP 384:JcY4EpuTCvqF76QWXgAecrnjVYpGNk2scMbmC5lSnpct5Yl:6W6WqFh2gYipGNk2scMCC5Ynat5
- TLSH T1E4233B466A0558F2C9EE0934309BA5275FFD5E3436FB50EBCAEBA9DC6E30047E014E16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory