General
- Target jaffacakes118_7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526.bin
- Size 444KB
- Sample260925-x97fdsx1bs
- SHA256 7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526
- MD5 e2cb17e385bc75d3ab421afa9fc41f9f
- SHA1 c6772d8340628623409da2729bf1282e35f206ea
- SHA512 bfbb2cc59fe67e8b269b02bac62b66ac560856e103ceee407e5e26110769b568a3444b594e305d36ceccf1c29227d25befb34210929bb3d14e6aceee937b640d
- SSDEEP 6144:x93IfDLkPlecCsOKz4xt/H2pYvceqzUjtzhLkkiln7/Qx5mw2LOy3ncHWo8VSl:nIfDGecCM4i0h1okilayLOyMHWE
- TLSH T133A46E32F2E19433D1631B789D6B86AC9C16BE117D69B84A2BF81D0C5F39681393B1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526.bin
- Size 444KB
- SHA256 7aca3898f887affda9a9b1c7ae1120399db86ed0a119bc3c97d4132a86928526
- MD5 e2cb17e385bc75d3ab421afa9fc41f9f
- SHA1 c6772d8340628623409da2729bf1282e35f206ea
- SHA512 bfbb2cc59fe67e8b269b02bac62b66ac560856e103ceee407e5e26110769b568a3444b594e305d36ceccf1c29227d25befb34210929bb3d14e6aceee937b640d
- SSDEEP 6144:x93IfDLkPlecCsOKz4xt/H2pYvceqzUjtzhLkkiln7/Qx5mw2LOy3ncHWo8VSl:nIfDGecCM4i0h1okilayLOyMHWE
- TLSH T133A46E32F2E19433D1631B789D6B86AC9C16BE117D69B84A2BF81D0C5F39681393B1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Adds Run key to start application
-
Modifies WinLogon
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
4Active Setup
1Registry Run Keys / Startup Folder
1Winlogon Helper DLL
2Privilege Escalation
Boot or Logon Autostart Execution
4Active Setup
1Registry Run Keys / Startup Folder
1Winlogon Helper DLL
2