General
- Target jaffacakes118_3112c78ab7075943f56f1cc697ee0b0f26e1177885d30e3d4769f1568d5506a1.bin
- Size 1.5MB
- Sample261002-eltkhsgf84
- SHA256 3112c78ab7075943f56f1cc697ee0b0f26e1177885d30e3d4769f1568d5506a1
- MD5 9145195967a678b865f85863a123dd4d
- SHA1 ac08c5a877afeb348cb5382663b6569cb102661d
- SHA512 a9779ee93648648888f9971a22baf815dfa710a0cd98acd0da489a69d2130755cdc20062604ad4d1302fb42a9539c0ee1c243ff432d9171c16ec65d717d64323
- SSDEEP 24576:jbj5MYkWzFqKnFyEYZGgDK6v9BB5Qzl+pBAKGkkeivmvtDInfx2Ha4F76Odv:Pj5BH8KAEPgDKa9u4BAKtke8f0Ha4FuQ
- TLSH T19B753377B6F0F3F9C211C448A30C91B53386A0652ACDE758CE6C97130697B19AD8A7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 1.5MB
- SHA256 46aecd3012f7f1cf0413372a77b49da76d4f6a91757f63831ead3506d1ce2549
- MD5 6d9c968f267a94b9a9c6895ff6540cc0
- SHA1 140fa522cc88e4bd3ae3867ce7ee509929867634
- SHA512 ae75fca8eafccc9a201b530a21d5d75d6ed3ddcac5ab5ba8c15fb73ab5ce2b9a5c3336c17a1dc2800789ad3aac9d6d30ad1b2efab71290b634647ea7bb5b371e
- SSDEEP 49152:ve75tpAKsPRgXQY9GWBSKPkeAxOH24VwoD:ve75tpAKsPRgg0zBeXsbdD
- TLSH T1AA75231BBAD0E2B1C232D0389F08A171F79158071A899E47FF5CA2530FB7715E89B799
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1