General
- Target jaffacakes118_Trojan-Dropper.Win32.FrauDrop.ajmuw.64a28d87240b03c47a47543acc4ccae0
- Size 644KB
- Sample261009-xdeeqsdf95
- SHA256 6ad486bb7e0a63c04d43328c36438ac861ef0c5b95da3abfdee0a37c6076ad96
- MD5 64a28d87240b03c47a47543acc4ccae0
- SHA1 b90ceb1e7dae05e86f3dcd27b27f9bca8cb46ea7
- SHA512 2200c13920412c7f3032a59cc6cbed7ee2194934cbabfefb8fc1ac96b27e48705652d3870b245e5df5b3d4f3953f473fb1b167f6b5e5bac026e01f82df93febb
- SSDEEP 6144:OsXoNt8l5uJ90wExwNABaJZ7P+zN2UCTWUID5IuXoNt8l5u6cDREc:OsXoNnrmxwN2aKUI5XoNn9RE
- TLSH T1DEE407A9A505E0D2CA9A8638DB77C4FDBB903C17DF839C2769413F1538B9C10751AA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.FrauDrop.ajmuw.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.FrauDrop.ajmuw.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.FrauDrop.ajmuw.64a28d87240b03c47a47543acc4ccae0
- Size 644KB
- SHA256 6ad486bb7e0a63c04d43328c36438ac861ef0c5b95da3abfdee0a37c6076ad96
- MD5 64a28d87240b03c47a47543acc4ccae0
- SHA1 b90ceb1e7dae05e86f3dcd27b27f9bca8cb46ea7
- SHA512 2200c13920412c7f3032a59cc6cbed7ee2194934cbabfefb8fc1ac96b27e48705652d3870b245e5df5b3d4f3953f473fb1b167f6b5e5bac026e01f82df93febb
- SSDEEP 6144:OsXoNt8l5uJ90wExwNABaJZ7P+zN2UCTWUID5IuXoNt8l5u6cDREc:OsXoNnrmxwN2aKUI5XoNn9RE
- TLSH T1DEE407A9A505E0D2CA9A8638DB77C4FDBB903C17DF839C2769413F1538B9C10751AA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext