General
- Target jaffacakes118_Trojan-Spy.Win32.Hookey.ny.29fe85e345bd0760449f465dbd989e85
- Size 3.2MB
- Sample261012-k6cqdstybt
- SHA256 aeee1a4e2ca34a80e450dde19d9a790857b5a5e725348b595794d546109e9cc4
- MD5 29fe85e345bd0760449f465dbd989e85
- SHA1 99b873c5e7286363606edc16331dc9733b3be313
- SHA512 cc04cd1d093c62f0119c63419d061f79d5e95d74a25dc9d21f7082a63f3e9ff7d4be05f9490e7242b4c125cad08026737167e883faf2d390019185305650dafc
- SSDEEP 49152:RJZoQrbTFZY1iaV0a4mv9YOiB0stOP6ScLIt9tUXjfNDpruSDIAKpfx/qIs17+AZ:RtrbTA1+aLu+se6lLO2zFpHeTY17dZ
- TLSH T100F52321B5D5C036C2B327B15EBEF7BAD63965360336C19B23D829714FA05812B2A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Spy.Win32.Hookey.ny.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Spy.Win32.Hookey.ny.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Spy.Win32.Hookey.ny.29fe85e345bd0760449f465dbd989e85
- Size 3.2MB
- SHA256 aeee1a4e2ca34a80e450dde19d9a790857b5a5e725348b595794d546109e9cc4
- MD5 29fe85e345bd0760449f465dbd989e85
- SHA1 99b873c5e7286363606edc16331dc9733b3be313
- SHA512 cc04cd1d093c62f0119c63419d061f79d5e95d74a25dc9d21f7082a63f3e9ff7d4be05f9490e7242b4c125cad08026737167e883faf2d390019185305650dafc
- SSDEEP 49152:RJZoQrbTFZY1iaV0a4mv9YOiB0stOP6ScLIt9tUXjfNDpruSDIAKpfx/qIs17+AZ:RtrbTA1+aLu+se6lLO2zFpHeTY17dZ
- TLSH T100F52321B5D5C036C2B327B15EBEF7BAD63965360336C19B23D829714FA05812B2A773
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext