General
- Target jaffacakes118_3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d.bin
- Size 44KB
- Sample261002-g8kl8sbb34
- SHA256 3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d
- MD5 a6c8c7178f0b8900ffdf77e1cbea1e0a
- SHA1 4666cd96aefb271540199ea7a678c907459e5d2c
- SHA512 371abe2d244aee354eba2068530d5dff85e63c2617b7ee681cade711446e8ce41e846a63dffa8fa8cf2580238c524a1daf51f9d1743284e560b995af70ab50dc
- SSDEEP 384:ZnTyn+dcvNgStLx9Qk9oBBfzj3Dewspct5E:hNANgELxSNBBrj3Dewsat5
- TLSH T169132A479F0488B2C2D54574350B9A3B5FBB6A3503628CD3C7B36AC66D349F48E3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d.bin
- Size 44KB
- SHA256 3b66684721def9fbe8274e9065234de748b0edf7e9ec7d9b5cfdcf78cc4ee53d
- MD5 a6c8c7178f0b8900ffdf77e1cbea1e0a
- SHA1 4666cd96aefb271540199ea7a678c907459e5d2c
- SHA512 371abe2d244aee354eba2068530d5dff85e63c2617b7ee681cade711446e8ce41e846a63dffa8fa8cf2580238c524a1daf51f9d1743284e560b995af70ab50dc
- SSDEEP 384:ZnTyn+dcvNgStLx9Qk9oBBfzj3Dewspct5E:hNANgELxSNBBrj3Dewsat5
- TLSH T169132A479F0488B2C2D54574350B9A3B5FBB6A3503628CD3C7B36AC66D349F48E3662B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Executes dropped EXE
-
Drops file in System32 directory