General
- Target jaffacakes118_0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd.bin
- Size 667KB
- Sample261002-grg5satsev
- SHA256 0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd
- MD5 1c29f1cb530befb8161e7f2c251c3421
- SHA1 3ea63679fa0291c32080cd1b9e1f24a0c27ed59d
- SHA512 672cf4c3028dc2dcbd4bc80b1609457296e1d4dc2e3f8fa9db1b01f9e589ed4d2f177996cfe6533da84713d37427acd91ba96d08aabd1c7f47d00483452ebbfd
- SSDEEP 12288:0fmj8eolym9eQuRbjJKdwShu4isQ3CBsnCB0wRBqwyd8SS:0FARbjQWs9OCB0wzqwyd8SS
- TLSH T1C2E4F111BAC53DB1C5BC32F6C29804BE1EBB2E353922745D4676352A2B76387DD1E08E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd.bin
- Size 667KB
- SHA256 0a275798d4c6aa72a078a58d0db3484db64661a4402b1ee441f1a04be95c14cd
- MD5 1c29f1cb530befb8161e7f2c251c3421
- SHA1 3ea63679fa0291c32080cd1b9e1f24a0c27ed59d
- SHA512 672cf4c3028dc2dcbd4bc80b1609457296e1d4dc2e3f8fa9db1b01f9e589ed4d2f177996cfe6533da84713d37427acd91ba96d08aabd1c7f47d00483452ebbfd
- SSDEEP 12288:0fmj8eolym9eQuRbjJKdwShu4isQ3CBsnCB0wRBqwyd8SS:0FARbjQWs9OCB0wzqwyd8SS
- TLSH T1C2E4F111BAC53DB1C5BC32F6C29804BE1EBB2E353922745D4676352A2B76387DD1E08E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext