General
- Target jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin
- Size 1.5MB
- Sample260930-qll18a1dmf
- SHA256 3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8
- MD5 b89a290a41689e6c91794d4e9c8f346d
- SHA1 842e4e6b25cdbba7d676cf02aae4a73e3f160ddd
- SHA512 55c861fab8417ee85dce7bb6d1124f0f69979e9841036bd43866d2efec05e6b1caa2433797504ccdbfea9365d895523705156e61dac91147cdb8474403169b94
- SSDEEP 24576:6ctFO431U0XwvjN/v8a6r3ugETwq16n0Bgx7bc46dHXGQcdo6z2gd3AgMclN:6V4FU0XeGhETwI6rpFoH2QC2gdQgFN
- TLSH T1C76533081EF4FAF6F2BF56719C82808CD51ABA70863A0403611E973767F3A85D896777
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8.bin
- Size 1.5MB
- SHA256 3830b10961d2909f731faf946fef02ef5343dbb7fdbfe4e70db61558c29da6e8
- MD5 b89a290a41689e6c91794d4e9c8f346d
- SHA1 842e4e6b25cdbba7d676cf02aae4a73e3f160ddd
- SHA512 55c861fab8417ee85dce7bb6d1124f0f69979e9841036bd43866d2efec05e6b1caa2433797504ccdbfea9365d895523705156e61dac91147cdb8474403169b94
- SSDEEP 24576:6ctFO431U0XwvjN/v8a6r3ugETwq16n0Bgx7bc46dHXGQcdo6z2gd3AgMclN:6V4FU0XeGhETwI6rpFoH2QC2gdQgFN
- TLSH T1C76533081EF4FAF6F2BF56719C82808CD51ABA70863A0403611E973767F3A85D896777
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1