General
- Target jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin
- Size 143KB
- Sample260925-wbl65asfjb
- SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
- MD5 360bd5f668c32ad045948b3bc5ce5cba
- SHA1 8740826229af3d4d67a0b4ce76b668fd7fe96b84
- SHA512 cf9af41920b874606cec1162b4a212066ddf8f199c04224a88a9a9147251d758cc3ec3d8c70e5057feb7312aeb948a65465ed4e71953cc3815c4ffbe27bb91c6
- SSDEEP 3072:mF2OQrUlA7HN088UFql/NlkaVHLIjVuPpi/6Fi9T0w8a3bwYE+/t:WQrL21dNl5Y6spbL3kYE+
- TLSH T139E36C25B2F38872C2B37F784D029E98A43E79613D75205A73E91F0D5D78BA46A2C353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3.bin
- Size 143KB
- SHA256 c57d3ef8173fa7dbc405cdf72712848365a627dac540416ede5420ffa9e87da3
- MD5 360bd5f668c32ad045948b3bc5ce5cba
- SHA1 8740826229af3d4d67a0b4ce76b668fd7fe96b84
- SHA512 cf9af41920b874606cec1162b4a212066ddf8f199c04224a88a9a9147251d758cc3ec3d8c70e5057feb7312aeb948a65465ed4e71953cc3815c4ffbe27bb91c6
- SSDEEP 3072:mF2OQrUlA7HN088UFql/NlkaVHLIjVuPpi/6Fi9T0w8a3bwYE+/t:WQrL21dNl5Y6spbL3kYE+
- TLSH T139E36C25B2F38872C2B37F784D029E98A43E79613D75205A73E91F0D5D78BA46A2C353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Remote Services: SMB/Windows Admin Shares
Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
Drops file in System32 directory