General
- Target jaffacakes118_Net-Worm.Win32.Allaple.b.ade8b65e3b9e1362de970
- Size 139KB
- Sample261009-vtygfada85
- SHA256 c60ece6a2c7dac358382799a8b9b94d4100a0f3173f79640acd4ea14d71df5ca
- MD5 a78922a57f5ade8b65e3b9e1362de970
- SHA1 579a84820d0f50c2678415122bd5c39680b5462e
- SHA512 f4532ae4b2a0789e7dbd6947509dc62d92b788b2d0c034f0e6932ba97f22b3f74b75001bd672a114f9e6c7d3112925c76cfa317dc1b65a9bc6bdcba731b91a97
- SSDEEP 1536:uN6/6nEkisWmunXDdH5teZBaKDkexvpV49asU/edhZKz/U8+UQyEKCUNrHPh6:otnEnBXDdZtYoviAa5ekTEFjKHPh
- TLSH T10BD3E0DE91284D80E4A37938243972FEFD91BD04A1D91515AE3447DAFCC8F383E98A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Net-Worm.Win32.Allaple.b.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Net-Worm.Win32.Allaple.b.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Net-Worm.Win32.Allaple.b.ade8b65e3b9e1362de970
- Size 139KB
- SHA256 c60ece6a2c7dac358382799a8b9b94d4100a0f3173f79640acd4ea14d71df5ca
- MD5 a78922a57f5ade8b65e3b9e1362de970
- SHA1 579a84820d0f50c2678415122bd5c39680b5462e
- SHA512 f4532ae4b2a0789e7dbd6947509dc62d92b788b2d0c034f0e6932ba97f22b3f74b75001bd672a114f9e6c7d3112925c76cfa317dc1b65a9bc6bdcba731b91a97
- SSDEEP 1536:uN6/6nEkisWmunXDdH5teZBaKDkexvpV49asU/edhZKz/U8+UQyEKCUNrHPh6:otnEnBXDdZtYoviAa5ekTEFjKHPh
- TLSH T10BD3E0DE91284D80E4A37938243972FEFD91BD04A1D91515AE3447DAFCC8F383E98A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Contacts a large (691) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory