General
- Target jaffacakes118_d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b.bin
- Size 49KB
- Sample260930-lrpl3st1ex
- SHA256 d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b
- MD5 c7cc8359dc0ac1c5936e5ca1785330c9
- SHA1 d27480404fecfa67c8a5505e5e5e80a3082590c8
- SHA512 430f0f724f353e4fc1bd0739f3335e3099403aa672e82b5caa4c0abdc1677b6d5e28b0fd944b2ac49efcf7d584d81d0d7844bcfb6d0582ca422f7a1e6822cdbe
- SSDEEP 768:IWx+r/wXaLb5UI7gVqDDWghOQkHvYOJRfGnuh//HwT0+wYVySjD9I3HXWX:Hx+TwXqd14LUOQkgOJOe5zHM
- TLSH T1F8333B22E64163B7D1D22FB08173A29A995EABA00603654F2FE45DBBFF731D16E00D16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b.bin
- Size 49KB
- SHA256 d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b
- MD5 c7cc8359dc0ac1c5936e5ca1785330c9
- SHA1 d27480404fecfa67c8a5505e5e5e80a3082590c8
- SHA512 430f0f724f353e4fc1bd0739f3335e3099403aa672e82b5caa4c0abdc1677b6d5e28b0fd944b2ac49efcf7d584d81d0d7844bcfb6d0582ca422f7a1e6822cdbe
- SSDEEP 768:IWx+r/wXaLb5UI7gVqDDWghOQkHvYOJRfGnuh//HwT0+wYVySjD9I3HXWX:Hx+TwXqd14LUOQkgOJOe5zHM
- TLSH T1F8333B22E64163B7D1D22FB08173A29A995EABA00603654F2FE45DBBFF731D16E00D16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext