General
- Target jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin
- Size 121KB
- Sample260925-ffed3sttct
- SHA256 cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74
- MD5 e133bda159ab8eaed676aebba9257886
- SHA1 9141af1483f1c91e7760a7fedcd9523197e8bf0c
- SHA512 40127091c11bb527e3b3120340d8760a30f0e30aa2d0042eb64827c6c1f889967b9ad4e6263179b1a099a4c31618223a3a0feb8894142cd0f633848bd6cf446e
- SSDEEP 1536:JEd+ad8dIn9L38irQ7rubcCL4hlQoKt/ZUx4ZJa3ZZwhJYfBHFx:i+aydc9LMxuB8qtpo4ZJS8hCfBHFx
- TLSH T1E2C37B13B3904576C052593C8C4B92B5FA3D3A316EE5259ABDF22F1CDE3D2821D693A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74.bin
- Size 121KB
- SHA256 cba83a058706b4cd4c56ee72b11782ca40f414717577777a9ff8b187e60d9b74
- MD5 e133bda159ab8eaed676aebba9257886
- SHA1 9141af1483f1c91e7760a7fedcd9523197e8bf0c
- SHA512 40127091c11bb527e3b3120340d8760a30f0e30aa2d0042eb64827c6c1f889967b9ad4e6263179b1a099a4c31618223a3a0feb8894142cd0f633848bd6cf446e
- SSDEEP 1536:JEd+ad8dIn9L38irQ7rubcCL4hlQoKt/ZUx4ZJa3ZZwhJYfBHFx:i+aydc9LMxuB8qtpo4ZJS8hCfBHFx
- TLSH T1E2C37B13B3904576C052593C8C4B92B5FA3D3A316EE5259ABDF22F1CDE3D2821D693A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Suspicious use of SetThreadContext