General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.43ddb86a7b3271fc000fa5c035b2e37c
- Size 68KB
- Sample261006-tf6p8aav91
- SHA256 cde2f394800822ae9d88426c0b6de9747062971885b22a2bb55b8c4fc36496c9
- MD5 43ddb86a7b3271fc000fa5c035b2e37c
- SHA1 1e2827fdf027fc6efd7fa7df69587ceede9e3980
- SHA512 6f7a67402664485af3600fc024d5a197a139c39cd1ad27db79762f71c0cc4ef095726c3b312abda979cdc4bbc2629ec123fd15bedb68231eff3e468d246ea08d
- SSDEEP 384:z8bHl4m6DCizdwW3st4pD29zs604vOH89R8HDsSt/bHl:Sl45DFRwXt6D2mLwOqqjLtTl
- TLSH T1F4632C13FA6CC167E159C3F22934974A680A7D3085B2ED0E75965F19CAB22D349F0B1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.jzxt.43ddb86a7b3271fc000fa5c035b2e37c
- Size 68KB
- SHA256 cde2f394800822ae9d88426c0b6de9747062971885b22a2bb55b8c4fc36496c9
- MD5 43ddb86a7b3271fc000fa5c035b2e37c
- SHA1 1e2827fdf027fc6efd7fa7df69587ceede9e3980
- SHA512 6f7a67402664485af3600fc024d5a197a139c39cd1ad27db79762f71c0cc4ef095726c3b312abda979cdc4bbc2629ec123fd15bedb68231eff3e468d246ea08d
- SSDEEP 384:z8bHl4m6DCizdwW3st4pD29zs604vOH89R8HDsSt/bHl:Sl45DFRwXt6D2mLwOqqjLtTl
- TLSH T1F4632C13FA6CC167E159C3F22934974A680A7D3085B2ED0E75965F19CAB22D349F0B1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory