General
- Target jaffacakes118_d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209.bin
- Size 52KB
- Sample260930-mkfw2azdqa
- SHA256 d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209
- MD5 648afe7e1cc8bece5e3edbd24ba72297
- SHA1 f8f63feb48ac6faeb131ec650d86bc5092fde726
- SHA512 493752389c44cfa238e8993cb818f8b8efb489556374fb20d9f7906bbc3b3ad4adaaf44af3167559f1a97b26d2442c3a12b36f432525b9c87676804989c5dedd
- SSDEEP 768:I4LSfdaToCYSirdCGPSo+TqTc+TBl+1X2leb:rMpLVPDl+1mleb
- TLSH T1C433284F6E2089B2DEAD0678B817AF1B177F6C31126411FBEA7B19D84C7474A44E4E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209.bin
- Size 52KB
- SHA256 d3efca542fbec1c5ffef01bfad75a6b2100931a9b11bd750828a3f45ec810209
- MD5 648afe7e1cc8bece5e3edbd24ba72297
- SHA1 f8f63feb48ac6faeb131ec650d86bc5092fde726
- SHA512 493752389c44cfa238e8993cb818f8b8efb489556374fb20d9f7906bbc3b3ad4adaaf44af3167559f1a97b26d2442c3a12b36f432525b9c87676804989c5dedd
- SSDEEP 768:I4LSfdaToCYSirdCGPSo+TqTc+TBl+1X2leb:rMpLVPDl+1mleb
- TLSH T1C433284F6E2089B2DEAD0678B817AF1B177F6C31126411FBEA7B19D84C7474A44E4E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory