General
- Target jaffacakes118_27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e.bin
- Size 682KB
- Sample261002-km5xtsttfw
- SHA256 27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e
- MD5 e12b6ec49e31cbdd8428dfbc3f6fe7cf
- SHA1 221462dfa8c94a686683c61cb4a7815fae30bf21
- SHA512 37e10f20493db686978ba02e40d0e316f223fd369a7e8c2fe88b923d43727b905469236001a608b8d33b0683ae90ad68f9abeb922338c980c3fc33d5f1ecfb4f
- SSDEEP 12288:RkWsEtWUIuZk9DaJtN+EMykwt4kv2rkJ9547H+6HpG8A/83joSZ:+VEt3SDatTXZBv0I8euA/A
- TLSH T11DE4C062F2D09477C27326749E5B8674A936BE103D295C4F3AE82D0D5F383C2753AA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e.bin
- Size 682KB
- SHA256 27f7338eeb8a103a4365b613160f82dbbaa39102be6b3d45b412bc29854aa33e
- MD5 e12b6ec49e31cbdd8428dfbc3f6fe7cf
- SHA1 221462dfa8c94a686683c61cb4a7815fae30bf21
- SHA512 37e10f20493db686978ba02e40d0e316f223fd369a7e8c2fe88b923d43727b905469236001a608b8d33b0683ae90ad68f9abeb922338c980c3fc33d5f1ecfb4f
- SSDEEP 12288:RkWsEtWUIuZk9DaJtN+EMykwt4kv2rkJ9547H+6HpG8A/83joSZ:+VEt3SDatTXZBv0I8euA/A
- TLSH T11DE4C062F2D09477C27326749E5B8674A936BE103D295C4F3AE82D0D5F383C2753AA93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Windows security bypass
-
Executes dropped EXE
-
Windows security modification
-
Checks whether UAC is enabled
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
4