315d5c481fde8f0c0886f90f42443268f69ba18831fca26bf0cd3a4df35bdc20 | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...kt.exe

windows10-2004-x64

jaffacakes...kt.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Dropper.Win32.Small.dkt.b1b4bb88f62bced4ef15386f9dd82587
Size 19KB
Sample261009-ymfjtsvs8n
SHA256 315d5c481fde8f0c0886f90f42443268f69ba18831fca26bf0cd3a4df35bdc20
MD5 b1b4bb88f62bced4ef15386f9dd82587
SHA1 ba08dd7317a7f9370430e2d293b64e4592a0d879
SHA512 aeb80a1d9e654828c2c14b8ad4d8b1e993f695c19c56184a92d288ab8846f55b2cf89f915e4b8d4f9d6a98875f0203cf87913b9cc8f01814dc1a8bfdb7c58683
SSDEEP 384:u4Y8T8anvGdikoEPiEOst1dEB9ztmmEhBHeHU4r13R4gM2Q4KFOF:uq8anjkoEPiEOsTGtmmEhheFysQ4MW
TLSH
T1A092BFAAD4D3E5F3E9E591B410CBD7FC4736900ACCC14C3AD7169968242E6E327A3E24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

adware defense_evasion discovery persistence privilege_escalation spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Trojan-Dropper.Win32.Small.dkt.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

14 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation spyware

Behavioral task

behavioral2

Sample

jaffacakes118_Trojan-Dropper.Win32.Small.dkt.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

15 signatures

150 seconds

adware defense_evasion discovery persistence privilege_escalation spyware

Malware Config

Targets

- Target
  jaffacakes118_Trojan-Dropper.Win32.Small.dkt.b1b4bb88f62bced4ef15386f9dd82587
- Size 19KB
- SHA256 315d5c481fde8f0c0886f90f42443268f69ba18831fca26bf0cd3a4df35bdc20
- MD5 b1b4bb88f62bced4ef15386f9dd82587
- SHA1 ba08dd7317a7f9370430e2d293b64e4592a0d879
- SHA512 aeb80a1d9e654828c2c14b8ad4d8b1e993f695c19c56184a92d288ab8846f55b2cf89f915e4b8d4f9d6a98875f0203cf87913b9cc8f01814dc1a8bfdb7c58683
- SSDEEP 384:u4Y8T8anvGdikoEPiEOst1dEB9ztmmEhBHeHU4r13R4gM2Q4KFOF:uq8anjkoEPiEOsTGtmmEhheFysQ4MW
- TLSH
  T1A092BFAAD4D3E5F3E9E591B410CBD7FC4736900ACCC14C3AD7169968242E6E327A3E24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware defense_evasion discovery persistence privilege_escalation spyware
- Modifies WinLogon for persistence
  persistence
- Deletes itself
  defense_evasion
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Process Injection

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Process Injection

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoverypersistenceprivilege_escalationspyware

behavioral2

adwaredefense_evasiondiscoverypersistenceprivilege_escalationspyware

© 2018-2026

Terms | Privacy