General
- Target jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.3e64b43c76dfc9f20272b301e34f1d6a
- Size 491KB
- Sample261009-ydsg2abs5p
- SHA256 8d2e94f810fa99c55b6143600045221c8c9516b3be4f5091844d5b1a41a41b1e
- MD5 3e64b43c76dfc9f20272b301e34f1d6a
- SHA1 c95647f5b464e17c7f36a9b6397bd4be43cc2c68
- SHA512 574e1eeacf493fea51e2894afab1eac2ef043539c03f59057e2e8fa4716a0c2e3e1698ed88265c69420b26af191fe7c6e69794e369f147d28ebd789c191b73af
- SSDEEP 12288:u6Wq4aaE6KwyF5L0Y2D1PqLNz7DSZg8l4tA2bXqNpC7f:0thEVaPqLNXQT+bFf
- TLSH T120B423D7E69AA501E9A443F58BD50692C5E4A277C7BDFF37F184006220CF1102A7FE9A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Scrop.cva.3e64b43c76dfc9f20272b301e34f1d6a
- Size 491KB
- SHA256 8d2e94f810fa99c55b6143600045221c8c9516b3be4f5091844d5b1a41a41b1e
- MD5 3e64b43c76dfc9f20272b301e34f1d6a
- SHA1 c95647f5b464e17c7f36a9b6397bd4be43cc2c68
- SHA512 574e1eeacf493fea51e2894afab1eac2ef043539c03f59057e2e8fa4716a0c2e3e1698ed88265c69420b26af191fe7c6e69794e369f147d28ebd789c191b73af
- SSDEEP 12288:u6Wq4aaE6KwyF5L0Y2D1PqLNz7DSZg8l4tA2bXqNpC7f:0thEVaPqLNXQT+bFf
- TLSH T120B423D7E69AA501E9A443F58BD50692C5E4A277C7BDFF37F184006220CF1102A7FE9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1