General
- Target jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.bin
- Size 48KB
- Sample260930-mrtfpsysav
- SHA256 570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd
- MD5 d01ec31b70a466e299337035c4b948dd
- SHA1 7bd9ca045bbf7045dcadd9a5da05c7ee7a2c4958
- SHA512 288dab0583872954bfb72468a11d61330812b75c86d06108f3c0203e46aaeb5cde4aaac761b2ca4964992eb29ae3f62170beb06bbf71c8dfeea9b2ac974908c0
- SSDEEP 384:XL8ryRBvJSiFVMlttLJhj0Z2/hHPhPWhYPt7gsTpH5NyZc5:XYk5JS7ltdJd3HPhPWhYPtNJ7yZc
- TLSH T1D7235C8E255028F2C69E0636368979075BAF0D3C319966B7E7B39DC87C6985FA1E0D03
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd.bin
- Size 48KB
- SHA256 570c60b98ef3cc561b63445c602b6716561f50d13f4ec223fa92a3b5c8e2cafd
- MD5 d01ec31b70a466e299337035c4b948dd
- SHA1 7bd9ca045bbf7045dcadd9a5da05c7ee7a2c4958
- SHA512 288dab0583872954bfb72468a11d61330812b75c86d06108f3c0203e46aaeb5cde4aaac761b2ca4964992eb29ae3f62170beb06bbf71c8dfeea9b2ac974908c0
- SSDEEP 384:XL8ryRBvJSiFVMlttLJhj0Z2/hHPhPWhYPt7gsTpH5NyZc5:XYk5JS7ltdJd3HPhPWhYPtNJ7yZc
- TLSH T1D7235C8E255028F2C69E0636368979075BAF0D3C319966B7E7B39DC87C6985FA1E0D03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory