General
- Target jaffacakes118_Trojan-GameThief.Win32.Nilage.ach.dd3619fe05ed289300f3a212a3f6c1dd
- Size 119KB
- Sample261011-172nxaaa37
- SHA256 0400cba143716d466aa806b1123a6e218f115640a1befcc4bcc36c837c3d048f
- MD5 dd3619fe05ed289300f3a212a3f6c1dd
- SHA1 f935a5a5c9a285c8e4b6c2654519a8114129a538
- SHA512 257de7a5d83405355ab01c1554e51cb9f05d92196c53ca322f552f5ff6291a63e6ba3a1f419175003b82b5b2d4f4ac6eb40cc2e93b110c05cff7e454e4866a44
- SSDEEP 3072:6OIUIgxf7QOhCgRtioum+Bqj0/F833LD3vC:6ObIcf8vgRsoXO00/Fy3
- TLSH T160C312C85074E63CFADD1B78479140AD8F65EAA51A0336B21AA73B4A9FBF34C0B4414B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-GameThief.Win32.Nilage.ach.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-GameThief.Win32.Nilage.ach.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-GameThief.Win32.Nilage.ach.dd3619fe05ed289300f3a212a3f6c1dd
- Size 119KB
- SHA256 0400cba143716d466aa806b1123a6e218f115640a1befcc4bcc36c837c3d048f
- MD5 dd3619fe05ed289300f3a212a3f6c1dd
- SHA1 f935a5a5c9a285c8e4b6c2654519a8114129a538
- SHA512 257de7a5d83405355ab01c1554e51cb9f05d92196c53ca322f552f5ff6291a63e6ba3a1f419175003b82b5b2d4f4ac6eb40cc2e93b110c05cff7e454e4866a44
- SSDEEP 3072:6OIUIgxf7QOhCgRtioum+Bqj0/F833LD3vC:6ObIcf8vgRsoXO00/Fy3
- TLSH T160C312C85074E63CFADD1B78479140AD8F65EAA51A0336B21AA73B4A9FBF34C0B4414B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory