General
- Target jaffacakes118_Trojan-Dropper.Win32.VB.drtn.7b7de8d70993d8f61bb337f7927670a1
- Size 456KB
- Sample261009-zz3esstyev
- SHA256 480a824d06fd000ac59560b6ecebef3c7726d11f729cf9ae48cf4edc48875a84
- MD5 7b7de8d70993d8f61bb337f7927670a1
- SHA1 415d839676f3ece1c940ffdcc4255c80cd98c6a0
- SHA512 d5e62320868cd83a2f6f104b2635442987a891a727c84d15e0c5e434f24fa42112f6c53013fda634d50be94c70d2e19eab3f625e9adecaa0369a9ab6629bbc16
- SSDEEP 6144:8zDBEl5mXjvzavUxa98QPNO7VCczifWb81dUU9oC2VTiaVYOHmXIoE+39pOTb6/j:Yea6IV3en2qHXZ39pOn
- TLSH T135A42BAD778EEDB1F90200B5B985D27459AE703431AD022FF7439B7939A66C97632303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.VB.drtn.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.VB.drtn.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.VB.drtn.7b7de8d70993d8f61bb337f7927670a1
- Size 456KB
- SHA256 480a824d06fd000ac59560b6ecebef3c7726d11f729cf9ae48cf4edc48875a84
- MD5 7b7de8d70993d8f61bb337f7927670a1
- SHA1 415d839676f3ece1c940ffdcc4255c80cd98c6a0
- SHA512 d5e62320868cd83a2f6f104b2635442987a891a727c84d15e0c5e434f24fa42112f6c53013fda634d50be94c70d2e19eab3f625e9adecaa0369a9ab6629bbc16
- SSDEEP 6144:8zDBEl5mXjvzavUxa98QPNO7VCczifWb81dUU9oC2VTiaVYOHmXIoE+39pOTb6/j:Yea6IV3en2qHXZ39pOn
- TLSH T135A42BAD778EEDB1F90200B5B985D27459AE703431AD022FF7439B7939A66C97632303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext