General
- Target jaffacakes118_06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5.bin
- Size 993KB
- Sample261002-gvkebatves
- SHA256 06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5
- MD5 1f845c61991a98de123efca4ac906586
- SHA1 bea93b7a2cca7467e1e95004608d4420743e37d5
- SHA512 06347e0535be4fe3157f3c8fb0483b805548f0894036132f4a8661c37fec8e6ec4ac034d1663c69fa6089fb6e0555857fc4ed4c91a79fc28414db2515ae72709
- SSDEEP 24576:FviGhoKcg7mZXW9jQAz/gURQYZ6SiTpJvT3fTI:FVbjQAz4YQzJvDLI
- TLSH T18325D111234A5CC6F2184EB00FAE76702B71FC6BFAE72A7E1260B3506D744607A997DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5.bin
- Size 993KB
- SHA256 06c1f786413f66af1fe20a740ee4ae673bc88f351ffd5bafc4ac9b5440edb4d5
- MD5 1f845c61991a98de123efca4ac906586
- SHA1 bea93b7a2cca7467e1e95004608d4420743e37d5
- SHA512 06347e0535be4fe3157f3c8fb0483b805548f0894036132f4a8661c37fec8e6ec4ac034d1663c69fa6089fb6e0555857fc4ed4c91a79fc28414db2515ae72709
- SSDEEP 24576:FviGhoKcg7mZXW9jQAz/gURQYZ6SiTpJvT3fTI:FVbjQAz4YQzJvDLI
- TLSH T18325D111234A5CC6F2184EB00FAE76702B71FC6BFAE72A7E1260B3506D744607A997DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Suspicious use of SetThreadContext