General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3e59eb006b88215dc4f6a1d1883bab4c
- Size 22KB
- Sample261014-ckvebaet91
- SHA256 74fd3df9b86937bf8224963997895e6484ca968f7f81cbf82f383bd46716e8bd
- MD5 3e59eb006b88215dc4f6a1d1883bab4c
- SHA1 bb5839457cda02ac1af7499d276a6af87f47dea0
- SHA512 1028b4f48221ea8afffac15c3072a667c7b08ead9a7f02e115a698e4b66a48fe7a0019475f56300d55d75fc42ce7efe743b34e0f11ec5e9cdc6e8e62a752f4b9
- SSDEEP 384:dyVlNjtU2etUARTi8o6mmoNBK3H1MCrkl4jByhYzx/iU8JWf:gVl7aXosoNBKXxrLBySx/i9G
- TLSH T147A24A91BCD989B0D0B1DDFC2C9FC21D9BFB782538A550F6509BA9DAD84E2018D2E1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.dll
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.dll
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3e59eb006b88215dc4f6a1d1883bab4c
- Size 22KB
- SHA256 74fd3df9b86937bf8224963997895e6484ca968f7f81cbf82f383bd46716e8bd
- MD5 3e59eb006b88215dc4f6a1d1883bab4c
- SHA1 bb5839457cda02ac1af7499d276a6af87f47dea0
- SHA512 1028b4f48221ea8afffac15c3072a667c7b08ead9a7f02e115a698e4b66a48fe7a0019475f56300d55d75fc42ce7efe743b34e0f11ec5e9cdc6e8e62a752f4b9
- SSDEEP 384:dyVlNjtU2etUARTi8o6mmoNBK3H1MCrkl4jByhYzx/iU8JWf:gVl7aXosoNBKXxrLBySx/i9G
- TLSH T147A24A91BCD989B0D0B1DDFC2C9FC21D9BFB782538A550F6509BA9DAD84E2018D2E1D3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1AppInit DLLs
1