General
- Target jaffacakes118_0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07.bin
- Size 48KB
- Sample260925-2gtfaayara
- SHA256 0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07
- MD5 2bca1284907ae842336551216fb3ecf5
- SHA1 960871f6153d86833c31a9b698c976c31ddc23b0
- SHA512 e0c90c0671c965225ce0bb45729e31727d3ef580d1e5c1c43ecf1061a1b83a7527178305b10aa44b1a3a29c558062def4858322ebe5deff1b42a0317ba3f4ffe
- SSDEEP 768:pR73PHvqFBaMcjgPhwVcToTHiJTzIrWS5G:pR7/HCKMcjr2Ir
- TLSH T10C23394B57006DF2CAD902B93997BB2B6BFF5D34133560EBD2E3988C583689B44A4D07
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07.bin
- Size 48KB
- SHA256 0d9e54a03e89738578f7fd113b467941342ae5db64dfd427294c5725ec0a1f07
- MD5 2bca1284907ae842336551216fb3ecf5
- SHA1 960871f6153d86833c31a9b698c976c31ddc23b0
- SHA512 e0c90c0671c965225ce0bb45729e31727d3ef580d1e5c1c43ecf1061a1b83a7527178305b10aa44b1a3a29c558062def4858322ebe5deff1b42a0317ba3f4ffe
- SSDEEP 768:pR73PHvqFBaMcjgPhwVcToTHiJTzIrWS5G:pR7/HCKMcjr2Ir
- TLSH T10C23394B57006DF2CAD902B93997BB2B6BFF5D34133560EBD2E3988C583689B44A4D07
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory