General
- Target jaffacakes118_f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7.bin
- Size 7.2MB
- Sample260925-ya5m7avfmc
- SHA256 f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7
- MD5 7d9725c54db34a4f337ef1187d49360c
- SHA1 93790ca7ce82053aaa9650ff09d635c15f4a9472
- SHA512 aa5c20c57a1d7a1cbe78b85bd0b414455e012794ca84cf7f3be696db74ed17075468dd79fdd9d0193981b59378b92d4efda8c85d39b5e608ff37a5d8fb985f23
- SSDEEP 98304:63o7ZQdT/dWjSt/uKZm+Y7wiAgQB9YGcV:647ZWT/dWjStmKZ3Y8iAgyBcV
- TLSH T15B76D073EA85F57BC0AE1A315473D5104AF62F1D262D8F872BF14818DF298853A7E287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7.bin
- Size 7.2MB
- SHA256 f363afb7e14f98c766369674fc70756c52a22c39d1ef0bd436fcc21e08e27db7
- MD5 7d9725c54db34a4f337ef1187d49360c
- SHA1 93790ca7ce82053aaa9650ff09d635c15f4a9472
- SHA512 aa5c20c57a1d7a1cbe78b85bd0b414455e012794ca84cf7f3be696db74ed17075468dd79fdd9d0193981b59378b92d4efda8c85d39b5e608ff37a5d8fb985f23
- SSDEEP 98304:63o7ZQdT/dWjSt/uKZm+Y7wiAgQB9YGcV:647ZWT/dWjStmKZ3Y8iAgyBcV
- TLSH T15B76D073EA85F57BC0AE1A315473D5104AF62F1D262D8F872BF14818DF298853A7E287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext