General
- Target jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin
- Size 6.7MB
- Sample260925-yblayavfnd
- SHA256 cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65
- MD5 9f19e5d9bf407acb2e71884024209238
- SHA1 63ce6aa95b13a9ecb26a432e2aa5fd95eec43587
- SHA512 39445a2c9c31ddbfd4ac0b0a0d903fd12bd154b9df59b0f96a6f023e8bc4e54710a5bdf8f8bd6ae2bdaddab0e0a350d76daef50ee4aeaf1984b790a4f89c0ce4
- SSDEEP 49152:/xFqGRtp//Pg2+SpGX4SAtFPvApqDR+Jo/w4J1M9eeQ3NLI1GhPYCrjU+Yh:/v5FPvAEDI54CoNkilrYZ
- TLSH T16F66CF73A305E53FC05A1B351522852CDA7AEA11D1369C8E47F03848FF799B5262EE8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65.bin
- Size 6.7MB
- SHA256 cb5dd7b5b3e1ff6d71d7d816b1d74e4cd3367e495dd41b8bc9b234a69fbb9f65
- MD5 9f19e5d9bf407acb2e71884024209238
- SHA1 63ce6aa95b13a9ecb26a432e2aa5fd95eec43587
- SHA512 39445a2c9c31ddbfd4ac0b0a0d903fd12bd154b9df59b0f96a6f023e8bc4e54710a5bdf8f8bd6ae2bdaddab0e0a350d76daef50ee4aeaf1984b790a4f89c0ce4
- SSDEEP 49152:/xFqGRtp//Pg2+SpGX4SAtFPvApqDR+Jo/w4J1M9eeQ3NLI1GhPYCrjU+Yh:/v5FPvAEDI54CoNkilrYZ
- TLSH T16F66CF73A305E53FC05A1B351522852CDA7AEA11D1369C8E47F03848FF799B5262EE8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext