General
- Target jaffacakes118_f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574.bin
- Size 1.7MB
- Sample260930-nhasnstbjc
- SHA256 f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574
- MD5 45b5af1fbeab4e725f0ba160157512ac
- SHA1 bcb840bc52f091f42536dd7dd776d935966493e1
- SHA512 d521d9b1eafb151c27c4b0c979282beb33b0840e9254648af3f530bc663de078047dea6a4b35a83e3a386d393e3584265a9379af7add440f0cfbff291cbbf9fb
- SSDEEP 24576:t29At3Thbi7IbvIbTUZLcZNBtoPTwyqqqEJ4J4J4JFfffGiAizhhh:HlOZNnATwyqqqEJ4J4J4JThhh
- TLSH T12685AE11E3918C33D9AB1E354C5B9698FC22BE152EE4885E2EFCDD4C4F7878138756A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574.bin
- Size 1.7MB
- SHA256 f6f2c72608ba428371acd4b4dfdd19c1b1661d275ff8a8c89f0972aaa59b2574
- MD5 45b5af1fbeab4e725f0ba160157512ac
- SHA1 bcb840bc52f091f42536dd7dd776d935966493e1
- SHA512 d521d9b1eafb151c27c4b0c979282beb33b0840e9254648af3f530bc663de078047dea6a4b35a83e3a386d393e3584265a9379af7add440f0cfbff291cbbf9fb
- SSDEEP 24576:t29At3Thbi7IbvIbTUZLcZNBtoPTwyqqqEJ4J4J4JFfffGiAizhhh:HlOZNnATwyqqqEJ4J4J4JThhh
- TLSH T12685AE11E3918C33D9AB1E354C5B9698FC22BE152EE4885E2EFCDD4C4F7878138756A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.