333edfd4d8f48a7b8cebffa0dc5c847af20403af3a3c3f99a65f5f7423a1e848 | Triage™

Login
Reports

Overview

overview

Static

static

3

jaffacakes...ce.exe

windows10-2004-x64

jaffacakes...ce.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831
Size 119KB
Sample261012-1csshsa16n
SHA256 333edfd4d8f48a7b8cebffa0dc5c847af20403af3a3c3f99a65f5f7423a1e848
MD5 eaecc8e74f3ce6f3dd92d88f7cc4c831
SHA1 7fc43387ff72c7ffa1dc4792068f9e3697a7dd2f
SHA512 0b3d8007e5449260736c34f6831041215d6ef245bd544dc9ec2bfa7afdabbd9a27dce69a7ae39d8f07202736f7c0f53758c648e0cfc72153ef030220ab0bdc53
SSDEEP 3072:VYunwoiem+z2in3qhmLSo94DaVs9smJiOb:VYuvxm+zLZy9s2i
TLSH
T11CC3071152E94021F4F23B3018B90A708B7BBC519E38CA8E568C5A6D5BF7B52DE74B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

jaffacakes118_Virus.Win32.Virut.ce.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Behavioral task

behavioral2

Sample

jaffacakes118_Virus.Win32.Virut.ce.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831
- Size 119KB
- SHA256 333edfd4d8f48a7b8cebffa0dc5c847af20403af3a3c3f99a65f5f7423a1e848
- MD5 eaecc8e74f3ce6f3dd92d88f7cc4c831
- SHA1 7fc43387ff72c7ffa1dc4792068f9e3697a7dd2f
- SHA512 0b3d8007e5449260736c34f6831041215d6ef245bd544dc9ec2bfa7afdabbd9a27dce69a7ae39d8f07202736f7c0f53758c648e0cfc72153ef030220ab0bdc53
- SSDEEP 3072:VYunwoiem+z2in3qhmLSo94DaVs9smJiOb:VYuvxm+zLZy9s2i
- TLSH
  T11CC3071152E94021F4F23B3018B90A708B7BBC519E38CA8E568C5A6D5BF7B52DE74B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery persistence privilege_escalation
- Modifies firewall policy service
  defense_evasion
- Drops file in Drivers directory
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Process Injection

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Process Injection

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy