General
- Target jaffacakes118_21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8.bin
- Size 1.3MB
- Sample260925-yg26msvgpg
- SHA256 21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8
- MD5 2a7d2987504844f7efedf89e61797ca7
- SHA1 3cff098f3716880730f0fe6ba208cc11c838fe91
- SHA512 fd914b44498e48a5f6dc0c02ba081fa589c2ed5e09750031976c5e80dafc126b43a0715ef5f93b8d8256f904b05b634cf97cfcf1f9107c78feaca3aa971f0a88
- SSDEEP 24576:/TAyiT6OWzIW3uFGVuYW5Q7Qb9XSNP2jTr8C5EkVOP1qO2T8A0TKeTuy:/TQvW4h9X4PmTg7X1f2T4T/Tuy
- TLSH T1BE556C26F682D037D1721A358C5BC2DDD826BF242D78984B7BE81F0C5F397817A252E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jaffacakes118_21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target jaffacakes118_21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8.bin
- Size 1.3MB
- SHA256 21f1cb4ccbb51aa1d309c879ab1f6d001692fe22ddcea3af54e4d53644214fa8
- MD5 2a7d2987504844f7efedf89e61797ca7
- SHA1 3cff098f3716880730f0fe6ba208cc11c838fe91
- SHA512 fd914b44498e48a5f6dc0c02ba081fa589c2ed5e09750031976c5e80dafc126b43a0715ef5f93b8d8256f904b05b634cf97cfcf1f9107c78feaca3aa971f0a88
- SSDEEP 24576:/TAyiT6OWzIW3uFGVuYW5Q7Qb9XSNP2jTr8C5EkVOP1qO2T8A0TKeTuy:/TQvW4h9X4PmTg7X1f2T4T/Tuy
- TLSH T1BE556C26F682D037D1721A358C5BC2DDD826BF242D78984B7BE81F0C5F397817A252E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1