General
- Target jaffacakes118_a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d.bin
- Size 47KB
- Sample260925-fp27hazfkb
- SHA256 a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d
- MD5 98c69239280fcb0d87d2484bb79601f8
- SHA1 d25f4d14f5f63ea92e17d37cd50efffb8d88804d
- SHA512 76e8f9769b6dfc3343edb902dcd8131c8c9de1b95415040edaa5e99797c2430c55563bc38f21c54a1ab40ca2e79e7c78e0d4828f92866768b88c3393c3cd10ec
- SSDEEP 768:Y6fV52EmMoPWa3u5VFmftNidSE78jms6f+KGggbka1J+u3A:Y6NAEmMoPWa390/78jms6WKUx10qA
- TLSH T175235B1B34D88033CC9240B027654B4B6FFBA93311A9D553DF582D193DF56A8DB3A2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target jaffacakes118_a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d.bin
- Size 47KB
- SHA256 a148afa53a358417eaf5923af00cab8bacf06e0462986809e1029db922033f2d
- MD5 98c69239280fcb0d87d2484bb79601f8
- SHA1 d25f4d14f5f63ea92e17d37cd50efffb8d88804d
- SHA512 76e8f9769b6dfc3343edb902dcd8131c8c9de1b95415040edaa5e99797c2430c55563bc38f21c54a1ab40ca2e79e7c78e0d4828f92866768b88c3393c3cd10ec
- SSDEEP 768:Y6fV52EmMoPWa3u5VFmftNidSE78jms6f+KGggbka1J+u3A:Y6NAEmMoPWa390/78jms6WKUx10qA
- TLSH T175235B1B34D88033CC9240B027654B4B6FFBA93311A9D553DF582D193DF56A8DB3A2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
Modifies Windows Firewall
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1