General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3aaaea9e307d05ded1016b82bbaf264d
- Size 2.6MB
- Sample261014-b5ph5aey5k
- SHA256 d73262f3a373ddd61cb218e84cef77e03c5581bf4811ec859ae4db6687c7af3f
- MD5 3aaaea9e307d05ded1016b82bbaf264d
- SHA1 627aef02a059e17427ceae07d64263f1801c03d9
- SHA512 c692186a5698cc09b22ac97e6aa77f1a1c9b0b9c5b050829a855f32fb90c68e08f982945fce60443b899385e1981ac5a2dc184870d2aef14f3b0b46b511c35c5
- SSDEEP 49152:lXxQ6sUnZzn/1JHR9RqyMBu77DXNsg6ATud0pCUh0OrL7flBCLYZM7lc0Qoj+yoJ:lXzJYyM8/zA0M0PLuLYZwlZQoSyo4Qpb
- TLSH T156C53343286514E6E506287DC77E6AD0AD0C3D434B9474226CEBCCD65B72CFE9ACB287
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3aaaea9e307d05ded1016b82bbaf264d
- Size 2.6MB
- SHA256 d73262f3a373ddd61cb218e84cef77e03c5581bf4811ec859ae4db6687c7af3f
- MD5 3aaaea9e307d05ded1016b82bbaf264d
- SHA1 627aef02a059e17427ceae07d64263f1801c03d9
- SHA512 c692186a5698cc09b22ac97e6aa77f1a1c9b0b9c5b050829a855f32fb90c68e08f982945fce60443b899385e1981ac5a2dc184870d2aef14f3b0b46b511c35c5
- SSDEEP 49152:lXxQ6sUnZzn/1JHR9RqyMBu77DXNsg6ATud0pCUh0OrL7flBCLYZM7lc0Qoj+yoJ:lXzJYyM8/zA0M0PLuLYZwlZQoSyo4Qpb
- TLSH T156C53343286514E6E506287DC77E6AD0AD0C3D434B9474226CEBCCD65B72CFE9ACB287
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Windows security bypass
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Windows security modification
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
3Disable or Modify System Firewall
1Disable or Modify Tools
2Modify Registry
3