General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.29bf2af3e3447aae18b3dd3f240678b8
- Size 400KB
- Sample261014-assvcaes2r
- SHA256 b1bc51844e740c971830e6b81eca4a9440ab631372550c192cd86d9b5332a5b4
- MD5 29bf2af3e3447aae18b3dd3f240678b8
- SHA1 cb054e475672fc9cc458828c5bc99fe69181d3f8
- SHA512 bad6009919ccd99d9f2c1493fde10e3842de1a833a4f7d3fcb7a9ef9643ad95f9c9e64dc5c4dee5836b99780b31f091e34e2610e65d1e094e7766adaf3b415bd
- SSDEEP 6144:RI7rI4W2UvBF6SWyja6qiUKGkAxoq9z+iVnvlS6mIO6Q+lHNgub:RIfwJjnwiAWcm6PYub
- TLSH T1B0941260F85CF17DDE1EB47700B24A0A963373F88614A513BB9A55C9D9113CCAEBE386
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.29bf2af3e3447aae18b3dd3f240678b8
- Size 400KB
- SHA256 b1bc51844e740c971830e6b81eca4a9440ab631372550c192cd86d9b5332a5b4
- MD5 29bf2af3e3447aae18b3dd3f240678b8
- SHA1 cb054e475672fc9cc458828c5bc99fe69181d3f8
- SHA512 bad6009919ccd99d9f2c1493fde10e3842de1a833a4f7d3fcb7a9ef9643ad95f9c9e64dc5c4dee5836b99780b31f091e34e2610e65d1e094e7766adaf3b415bd
- SSDEEP 6144:RI7rI4W2UvBF6SWyja6qiUKGkAxoq9z+iVnvlS6mIO6Q+lHNgub:RIfwJjnwiAWcm6PYub
- TLSH T1B0941260F85CF17DDE1EB47700B24A0A963373F88614A513BB9A55C9D9113CCAEBE386
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies WinLogon for persistence
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1