General
- Target jaffacakes118_d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50.bin
- Size 378KB
- Sample260925-vs7cyssakf
- SHA256 d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50
- MD5 51236683eafa95865f78b8aada70ad77
- SHA1 05834b5d0c8d13e8f916182607109676441395e4
- SHA512 58ce3d2e067df7d269fa59a4b5166bb8812885b9f0359aaa34dc3ee0a4b84552b1fe69ed13e5c2a7020a215f9241b5226b3317044a72d9796a642cb648cd885b
- SSDEEP 6144:dcXAmXcie4eflvzG0rv/m8NqoPh00AOmZTNWMQ5pjmRfD9QYABlpB77777J77c7n:OhXl1ClvzHeduh00tI+psfZO
- TLSH T1EE846D36F6D1C437E2632A78CC5B86A49C35BE503D2998863BF82D0C8F3978179652D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50.bin
- Size 378KB
- SHA256 d8cf2f616fa5f604b1e56e99c1c468bf6aec0d07e3d3db9598c95cf43fdb7a50
- MD5 51236683eafa95865f78b8aada70ad77
- SHA1 05834b5d0c8d13e8f916182607109676441395e4
- SHA512 58ce3d2e067df7d269fa59a4b5166bb8812885b9f0359aaa34dc3ee0a4b84552b1fe69ed13e5c2a7020a215f9241b5226b3317044a72d9796a642cb648cd885b
- SSDEEP 6144:dcXAmXcie4eflvzG0rv/m8NqoPh00AOmZTNWMQ5pjmRfD9QYABlpB77777J77c7n:OhXl1ClvzHeduh00tI+psfZO
- TLSH T1EE846D36F6D1C437E2632A78CC5B86A49C35BE503D2998863BF82D0C8F3978179652D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Windows security bypass
-
Windows security modification
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5