General
- Target jaffacakes118_Trojan-Downloader.Win32.Small.bsw.846ea7fee0162e056fab3828e1dbefc0
- Size 36KB
- Sample261006-p86tgazvbw
- SHA256 41d0974cbdef4ea3f95857128c668217b42510a911b620909b430ca9575ebd78
- MD5 846ea7fee0162e056fab3828e1dbefc0
- SHA1 ac0284458e84832e0c9f666c6d381487a1925236
- SHA512 d29018fa43b919de1f730e15d608ccd34e142f9b1102a87a4ea3dc039ddf4a185d8398b51ded89e923a036d7e50a1838e19df687773b0d8aebbae5a913c8937d
- SSDEEP 768:r5a81vWHW4mCVrTdYHNocTd5kG2f298+PxPha5:r51hWZDV9YtVP2fGv3
- TLSH T164F2E15BEED9C83EE1CA75F152358207FA3C1821B133466F561A4C9A7DD2831A83D793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.bsw.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.bsw.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Downloader.Win32.Small.bsw.846ea7fee0162e056fab3828e1dbefc0
- Size 36KB
- SHA256 41d0974cbdef4ea3f95857128c668217b42510a911b620909b430ca9575ebd78
- MD5 846ea7fee0162e056fab3828e1dbefc0
- SHA1 ac0284458e84832e0c9f666c6d381487a1925236
- SHA512 d29018fa43b919de1f730e15d608ccd34e142f9b1102a87a4ea3dc039ddf4a185d8398b51ded89e923a036d7e50a1838e19df687773b0d8aebbae5a913c8937d
- SSDEEP 768:r5a81vWHW4mCVrTdYHNocTd5kG2f298+PxPha5:r51hWZDV9YtVP2fGv3
- TLSH T164F2E15BEED9C83EE1CA75F152358207FA3C1821B133466F561A4C9A7DD2831A83D793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
2