General
- Target jaffacakes118_40879cded6a1cb32857844509af934521936650a5e1176805cec9649d4fb7611.bin
- Size 1.2MB
- Sample260925-fnwnbszerb
- SHA256 40879cded6a1cb32857844509af934521936650a5e1176805cec9649d4fb7611
- MD5 54f8f47e868efe2e56ade0cd7e186156
- SHA1 d0314a3b563ed2b11139994823799b16a44b6a55
- SHA512 cb6dcc24cfc0931bcefd33e9b6313ce0cabef54382ccd16f17dff8c346c45185cedc4229f119ca3ee197cf77f44b6b6969813e0bb9d1dc173a632db4e378d736
- SSDEEP 24576:lpo/2+ttPJLfpRKPCT0WXw7/ecMl9adMO49eOKRrO:se2PJLaPCAWXWMlwqn9elM
- TLSH T1AD45E042B7C680F5D8533DB11A77D32AD7397A154326C697EFE02E228E214709E3A3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_40879cded6a1cb32857844509af934521936650a5e1176805cec9649d4fb7611.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_40879cded6a1cb32857844509af934521936650a5e1176805cec9649d4fb7611.bin
- Size 1.2MB
- SHA256 40879cded6a1cb32857844509af934521936650a5e1176805cec9649d4fb7611
- MD5 54f8f47e868efe2e56ade0cd7e186156
- SHA1 d0314a3b563ed2b11139994823799b16a44b6a55
- SHA512 cb6dcc24cfc0931bcefd33e9b6313ce0cabef54382ccd16f17dff8c346c45185cedc4229f119ca3ee197cf77f44b6b6969813e0bb9d1dc173a632db4e378d736
- SSDEEP 24576:lpo/2+ttPJLfpRKPCT0WXw7/ecMl9adMO49eOKRrO:se2PJLaPCAWXWMlwqn9elM
- TLSH T1AD45E042B7C680F5D8533DB11A77D32AD7397A154326C697EFE02E228E214709E3A3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1