General
- Target jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin
- Size 608KB
- Sample260930-lmfhlswhrb
- SHA256 172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c
- MD5 78fb15584f6473db1f6054fda2cb05cc
- SHA1 6c94ddd3a7b704153ff42c6431de8d0fb9c7b687
- SHA512 17f1c0d3fff6e66ed76f17cdb93a714173e15665b3f7a19e6e2103addb932d1d6f62b7652662cd36eec5ad5b4e6a2400eb3d8d842588cf7cc32d2bbe774198b9
- SSDEEP 12288:Znbzs7sHNicWRnjoplZfIstMR97Q9U8KE9lr1bVMi6EXkiEL:Znbg7sHNihRilBI2MR97s3r1h1wh
- TLSH T186D4D021668B0C10F5B676F8E0D9F930136F3D9985D4F6B412B8326A13769D7EE184CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c.bin
- Size 608KB
- SHA256 172a6a5c48350936ddd834b30e9af6378ea57822291ec14f4b9b2f7204f01e1c
- MD5 78fb15584f6473db1f6054fda2cb05cc
- SHA1 6c94ddd3a7b704153ff42c6431de8d0fb9c7b687
- SHA512 17f1c0d3fff6e66ed76f17cdb93a714173e15665b3f7a19e6e2103addb932d1d6f62b7652662cd36eec5ad5b4e6a2400eb3d8d842588cf7cc32d2bbe774198b9
- SSDEEP 12288:Znbzs7sHNicWRnjoplZfIstMR97Q9U8KE9lr1bVMi6EXkiEL:Znbg7sHNihRilBI2MR97s3r1h1wh
- TLSH T186D4D021668B0C10F5B676F8E0D9F930136F3D9985D4F6B412B8326A13769D7EE184CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext