General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.1be20004ce0a44627cc2efd0415a3b69
- Size 571KB
- Sample261008-mplcbafs2m
- SHA256 e5eaa24723a6b64ce76149013fb97ffb15628bf6787be14cea1c9f84038f3654
- MD5 1be20004ce0a44627cc2efd0415a3b69
- SHA1 2b17199f1ac93aa0b85cd9b0fb1d13008ebb9567
- SHA512 d586b85afe153c42fabc26c8903734ab049474b0ef9e91d2072bf235f531edff66cc497fe9066c2ed29b6f08aa73f22df27a06ed8bc29fb57953f6e2ae75d59d
- SSDEEP 12288:0lqHWXdYUqpkIsD/zw7LJzWwmsgWYAYqFge09/brHE56hfzMK:7SOUqpuD/zw7LJzEsgWYsOFDrE56aK
- TLSH T1C8C42357CE634FC11908173F07BA408B9764FF47F2B0A31A64B6C87AB6856C44B647AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
[HOT] Kata TOPLESS Amazing!.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
[HOT] Kata TOPLESS Amazing!.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target [HOT] Kata TOPLESS Amazing!.exe
- Size 1.1MB
- SHA256 159cef881ef94cf7c4ec55f737e550b493028ea173d6aa9502acec497bffa6a8
- MD5 2dbb8febf83a7e4b8a5dc6f8d21adaa8
- SHA1 df6be33e5c946804e0c6661bd2594fc8600f36cd
- SHA512 6077c9a7e3904f1b988a02e25664adca0023a6b2435e3cf91b0f20576268508a3e72e8e0465ad4319ac44448363c29d436dafb6068c71378285e76c656aff19e
- SSDEEP 24576:mRmJkqoQrilOIQ+yMxGaFQpMicU5DD0TlTdu:vJXoQryTiMxGaFdUFUxu
- TLSH T185354A52B2DB5221CD623574F927A671E3283D310F158967A2AC3E193FE029CD7B6F21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Suspicious use of SetThreadContext