General
- Target jaffacakes118_Trojan-Spy.Win32.AutoHK.nw.85f72435caa0bcb7bf491692e95b979e
- Size 747KB
- Sample261006-vmx74abs5t
- SHA256 9db6d36d32291627d74cc6727efa16e0de517b8b393cd95b9b870f918b119027
- MD5 85f72435caa0bcb7bf491692e95b979e
- SHA1 44610ef8badd25919cfaf8fbe0b5d392063e6030
- SHA512 9869f5f31b6c75182c6490a93abd0e43675713bbb96ffc769e40da63b0ee553774a22825a8f02db979bf8a66c274e19d3a0cec9e46a039be9a335e8dbe411873
- SSDEEP 12288:g6louxSvoM6/oKvn9RNQZGMY9/iysA8rlVatYc+HR2sGEo8KYy0feC8kFMQfzvbo:gqouyE/vV2xR2v7Yy0fR8kxzb5y90oD
- TLSH T1ECF4AE65B28240F3E981317145BADB76EA39B53A1334AED3B7A42E751E211C37A3D30D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.AutoHK.nw.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.AutoHK.nw.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.AutoHK.nw.85f72435caa0bcb7bf491692e95b979e
- Size 747KB
- SHA256 9db6d36d32291627d74cc6727efa16e0de517b8b393cd95b9b870f918b119027
- MD5 85f72435caa0bcb7bf491692e95b979e
- SHA1 44610ef8badd25919cfaf8fbe0b5d392063e6030
- SHA512 9869f5f31b6c75182c6490a93abd0e43675713bbb96ffc769e40da63b0ee553774a22825a8f02db979bf8a66c274e19d3a0cec9e46a039be9a335e8dbe411873
- SSDEEP 12288:g6louxSvoM6/oKvn9RNQZGMY9/iysA8rlVatYc+HR2sGEo8KYy0feC8kFMQfzvbo:gqouyE/vV2xR2v7Yy0fR8kxzb5y90oD
- TLSH T1ECF4AE65B28240F3E981317145BADB76EA39B53A1334AED3B7A42E751E211C37A3D30D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory