General
- Target jaffacakes118_202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55.bin
- Size 128KB
- Sample261002-j2pcysdd82
- SHA256 202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55
- MD5 e2da6323cea2d708d1fe7f9bf42e08ab
- SHA1 04664e6307a7e824588ba286f9b423427e967d47
- SHA512 1f14a9469b050b9eae24d113525d61e9a0dba0502b8179df3c2e69bad0bcc805c666a9b5fc0e81c31940a7e81dfdddde0c1bb3f1882835a557da7129bc56d479
- SSDEEP 1536:ZsVWahLPTj2MazXSlJHXS4nMprIAJSOrQ/4HJM+t/QUHqkSW:2j1j2/zCl1xMNmO0/4HWgo9kSW
- TLSH T1B9D3C5167683E2B5C92A93766E2541E800D8B9310045DD0FF2CB67797BB29EBB770387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55.bin
- Size 128KB
- SHA256 202de359d5870b3b9006b966bf08b4393e843450f4af413ab4a0950d41535a55
- MD5 e2da6323cea2d708d1fe7f9bf42e08ab
- SHA1 04664e6307a7e824588ba286f9b423427e967d47
- SHA512 1f14a9469b050b9eae24d113525d61e9a0dba0502b8179df3c2e69bad0bcc805c666a9b5fc0e81c31940a7e81dfdddde0c1bb3f1882835a557da7129bc56d479
- SSDEEP 1536:ZsVWahLPTj2MazXSlJHXS4nMprIAJSOrQ/4HJM+t/QUHqkSW:2j1j2/zCl1xMNmO0/4HWgo9kSW
- TLSH T1B9D3C5167683E2B5C92A93766E2541E800D8B9310045DD0FF2CB67797BB29EBB770387
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2