General
- Target jaffacakes118_37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9.bin
- Size 1.5MB
- Sample261002-jz2khadc68
- SHA256 37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9
- MD5 76545cbeb128fb44baf537765d4c00f9
- SHA1 5faea58e41eab60f4ceb07121726a5fc34875e4b
- SHA512 e4da9d21a5d2180c0e0e2fba06269adf9cb435e9729424fd59f8fff32162740950fe2a4f424c449801d93ce66c43de62ac8b88e781e07dd0d1a4fba20c149da5
- SSDEEP 24576:DnISZcTc0WS40o4/Ec7w4BRW5Qqt+89EhJkIxPxM4SsEIJay5UzpH88JT3ofTz8X:D1so4Mii+8i3kwPqLPSjUzlTUTITrH
- TLSH T1F3756C65BB41C037C1729A758C67C2DE98257E142DF99C8B7BD82F0C5F392417A382EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9.bin
- Size 1.5MB
- SHA256 37d0c892c00cc33854c642525dc21e4ad07c03b7e558f45a1e2ac23421a2d6a9
- MD5 76545cbeb128fb44baf537765d4c00f9
- SHA1 5faea58e41eab60f4ceb07121726a5fc34875e4b
- SHA512 e4da9d21a5d2180c0e0e2fba06269adf9cb435e9729424fd59f8fff32162740950fe2a4f424c449801d93ce66c43de62ac8b88e781e07dd0d1a4fba20c149da5
- SSDEEP 24576:DnISZcTc0WS40o4/Ec7w4BRW5Qqt+89EhJkIxPxM4SsEIJay5UzpH88JT3ofTz8X:D1so4Mii+8i3kwPqLPSjUzlTUTITrH
- TLSH T1F3756C65BB41C037C1729A758C67C2DE98257E142DF99C8B7BD82F0C5F392417A382EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1