General
- Target jaffacakes118_Installer.exe
- Size 1.6MB
- Sample261006-jdk1mavvc1
- SHA256 44eadb00922d7165b4a392e0c7b84cbc0cd79e2a9e0d0fabab80a8482ea45c81
- MD5 4b83769da687faa1d2a3a6a7d94f7c3c
- SHA1 ad6518d78a02c8c23955b1bf0d59a1dbef815ee6
- SHA512 2fc5322ecbd98b6c8ebb7076d3d6106d97588b2b20502ca10943ae2b644d21ecea4b972639aa3753447bb1fb6318cfb9f1ac032b2e93fc932b7b13c8fc42fde0
- SSDEEP 24576:TFREUwuWbs9acNRzAu03JTHXx0JP27GkTDmAQmJ9z5q2Kv/Wtli6huYz1Yf:TzAFI5TlSz5bKv/0uYz1Yf
- TLSH T177853951FC9B14F1EA07153248A762AF23359D091F35CFC7EA447B6DAC73AE1093262A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Installer.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Installer.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Installer.exe
- Size 1.6MB
- SHA256 44eadb00922d7165b4a392e0c7b84cbc0cd79e2a9e0d0fabab80a8482ea45c81
- MD5 4b83769da687faa1d2a3a6a7d94f7c3c
- SHA1 ad6518d78a02c8c23955b1bf0d59a1dbef815ee6
- SHA512 2fc5322ecbd98b6c8ebb7076d3d6106d97588b2b20502ca10943ae2b644d21ecea4b972639aa3753447bb1fb6318cfb9f1ac032b2e93fc932b7b13c8fc42fde0
- SSDEEP 24576:TFREUwuWbs9acNRzAu03JTHXx0JP27GkTDmAQmJ9z5q2Kv/Wtli6huYz1Yf:TzAFI5TlSz5bKv/0uYz1Yf
- TLSH T177853951FC9B14F1EA07153248A762AF23359D091F35CFC7EA447B6DAC73AE1093262A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Family: RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.