General
- Target jaffacakes118_607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d.bin
- Size 32KB
- Sample260925-wpcvlsshla
- SHA256 607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d
- MD5 e105d90385045c2f5e4e16ffbe67f4f2
- SHA1 f24ae3aaa2f4a18affe58ad64d66bf32bc1e16a1
- SHA512 4a46e7708623c6a33f3da227e868c0843c1b6a505e19c95d6eef0b027d74a22381810b4572798e813b573a1c899ffd2efa18fc3aeacea47189dc8220aca9112a
- SSDEEP 384:fBtKduK2YwdTZTWIDIrZb/9QWTcz3y+zPLG1bH9paXaXKm5JJ:fBTdTFvUlB1TczmwTIJ
- TLSH T121E2AF0A1F4268F0C7E909F40C17861EE9621937437690F3AFB7A2D5DEE56607F15147
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d.bin
- Size 32KB
- SHA256 607dedfd0c16b58e7c31bb94da6556e94b2b3fe63016de8236ccb5c85fed1e8d
- MD5 e105d90385045c2f5e4e16ffbe67f4f2
- SHA1 f24ae3aaa2f4a18affe58ad64d66bf32bc1e16a1
- SHA512 4a46e7708623c6a33f3da227e868c0843c1b6a505e19c95d6eef0b027d74a22381810b4572798e813b573a1c899ffd2efa18fc3aeacea47189dc8220aca9112a
- SSDEEP 384:fBtKduK2YwdTZTWIDIrZb/9QWTcz3y+zPLG1bH9paXaXKm5JJ:fBTdTFvUlB1TczmwTIJ
- TLSH T121E2AF0A1F4268F0C7E909F40C17861EE9621937437690F3AFB7A2D5DEE56607F15147
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory