General
- Target jaffacakes118_2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef.bin
- Size 993KB
- Sample261002-gr3fqatsht
- SHA256 2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef
- MD5 691843f9c2fe622e5ed59d26ff8ae60f
- SHA1 ef50ee7670159e62d0fb004fda945e4c8d2bd6b0
- SHA512 cc65ed8f80947c3f0c7a8f15eb673fe0cfe34c980370277266a3fae4b8ff8ccd4d4dedc4c980cfeba0b0202f590d1627bc3d6c9874b5aa29acefb1b2f1b3fda3
- SSDEEP 24576:FviGhoKcg7mZXW9jQAz/gURQYZ6SiTpJvT3fT:FVbjQAz4YQzJvDL
- TLSH T1E025D011334A5CC6F2184EB00FAE77702A71FC6BBAE72A7E1260B3506D744607A997DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef.bin
- Size 993KB
- SHA256 2e8a27b3d17751687d276292fec3b57c66929e630a13c118abf6dd5305141cef
- MD5 691843f9c2fe622e5ed59d26ff8ae60f
- SHA1 ef50ee7670159e62d0fb004fda945e4c8d2bd6b0
- SHA512 cc65ed8f80947c3f0c7a8f15eb673fe0cfe34c980370277266a3fae4b8ff8ccd4d4dedc4c980cfeba0b0202f590d1627bc3d6c9874b5aa29acefb1b2f1b3fda3
- SSDEEP 24576:FviGhoKcg7mZXW9jQAz/gURQYZ6SiTpJvT3fT:FVbjQAz4YQzJvDL
- TLSH T1E025D011334A5CC6F2184EB00FAE77702A71FC6BBAE72A7E1260B3506D744607A997DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext