General
- Target jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.da7ebb8fa4b8286e85c2fceb974bc399
- Size 738KB
- Sample261009-v2pt9scs7x
- SHA256 576809051d989f1ecc357740a628ebd6ebcb36964b819d5d58c16c444e18e53d
- MD5 da7ebb8fa4b8286e85c2fceb974bc399
- SHA1 020beee80695fa031da29d4c81b94ceee53439dc
- SHA512 44de98681f17e01bb5ff4ebb3e3e059dde35c2cf7d7f8e776daf29f485b17e9eaae207e014e7ef1f26b25259b645a1a84c46af934eb14d490396a04855af7322
- SSDEEP 12288:LL8XD1aX3kT3LnmGdMa3JLi779XzZt58eKpieycV74SxV9Xwd:OaCrfLi7Lv8eKDV7RV9Xm
- TLSH T108F4E04BFEB6C945E9B6C0313C2345B511A27F51A75892AA518F3E2BF0367306308FD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.ArchSMS.ahd.da7ebb8fa4b8286e85c2fceb974bc399
- Size 738KB
- SHA256 576809051d989f1ecc357740a628ebd6ebcb36964b819d5d58c16c444e18e53d
- MD5 da7ebb8fa4b8286e85c2fceb974bc399
- SHA1 020beee80695fa031da29d4c81b94ceee53439dc
- SHA512 44de98681f17e01bb5ff4ebb3e3e059dde35c2cf7d7f8e776daf29f485b17e9eaae207e014e7ef1f26b25259b645a1a84c46af934eb14d490396a04855af7322
- SSDEEP 12288:LL8XD1aX3kT3LnmGdMa3JLi779XzZt58eKpieycV74SxV9Xwd:OaCrfLi7Lv8eKDV7RV9Xm
- TLSH T108F4E04BFEB6C945E9B6C0313C2345B511A27F51A75892AA518F3E2BF0367306308FD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1