General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c
- Size 700KB
- Sample261009-vkp4ps1vbw
- SHA256 294982d9254ce9453e1e9e4a566cdb17702fb99bbee6f59c97a18746859e8c3e
- MD5 d8c1a239ab430d20b6d56d0830558c5c
- SHA1 8ba4530e71b4c337944d64c6a47ff5395907f6e6
- SHA512 1bad3b252bed0cfd4bb7f6687e40ec4411b91baf7f18bd850e570c03dca54aa25d2768b882bd7d9ab6d9b253016cf9c456a5baddfed7924ccba12edfb531e67c
- SSDEEP 3072:F2CvdNufiDxOoBAQUJc26zvaNlNednxTUz:sCvLufMXThTaEdZw
- TLSH T186E47D2532D4C072E25725308AA5C7F25A3AFC714E759D9BBFD90B3E4F682D0CA24396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.d8c1a239ab430d20b6d56d0830558c5c
- Size 700KB
- SHA256 294982d9254ce9453e1e9e4a566cdb17702fb99bbee6f59c97a18746859e8c3e
- MD5 d8c1a239ab430d20b6d56d0830558c5c
- SHA1 8ba4530e71b4c337944d64c6a47ff5395907f6e6
- SHA512 1bad3b252bed0cfd4bb7f6687e40ec4411b91baf7f18bd850e570c03dca54aa25d2768b882bd7d9ab6d9b253016cf9c456a5baddfed7924ccba12edfb531e67c
- SSDEEP 3072:F2CvdNufiDxOoBAQUJc26zvaNlNednxTUz:sCvLufMXThTaEdZw
- TLSH T186E47D2532D4C072E25725308AA5C7F25A3AFC714E759D9BBFD90B3E4F682D0CA24396
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies firewall policy service
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2