General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.1481f50bf8a8341cf592be31eed0017d
- Size 116KB
- Sample261014-g8hsmsgz7t
- SHA256 2e0feb5ea03f650501c8c17d6d24fc412d98eafadd68bae7aea071fe0fb45430
- MD5 1481f50bf8a8341cf592be31eed0017d
- SHA1 81a765ff8474d9d9f8dfc1bc343d3a7ef346eaac
- SHA512 34f55a28909b3a22b53b55c9a8ab635afba7730146865f51a55a7154a4e75039c4aa1dca6fde278f7a7c5b6dcb39129e3ec2a4caa3dfa8196c97ddb172e63a4f
- SSDEEP 1536:tLR2A3E9ORxOHpO/z2LCNEALRsF3AHjXhSZm9uaAX7T7B+X4cGDv5nk6APk7LX:L3E98o/IEiRsuHrh+mAaK7MTPsHX
- TLSH T1A0C3D023B9C1D173C04755B548A4DBA07EBFF92312AA954BBBAE13FE5F903C04639285
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.1481f50bf8a8341cf592be31eed0017d
- Size 116KB
- SHA256 2e0feb5ea03f650501c8c17d6d24fc412d98eafadd68bae7aea071fe0fb45430
- MD5 1481f50bf8a8341cf592be31eed0017d
- SHA1 81a765ff8474d9d9f8dfc1bc343d3a7ef346eaac
- SHA512 34f55a28909b3a22b53b55c9a8ab635afba7730146865f51a55a7154a4e75039c4aa1dca6fde278f7a7c5b6dcb39129e3ec2a4caa3dfa8196c97ddb172e63a4f
- SSDEEP 1536:tLR2A3E9ORxOHpO/z2LCNEALRsF3AHjXhSZm9uaAX7T7B+X4cGDv5nk6APk7LX:L3E98o/IEiRsuHrh+mAaK7MTPsHX
- TLSH T1A0C3D023B9C1D173C04755B548A4DBA07EBFF92312AA954BBBAE13FE5F903C04639285
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies firewall policy service
-
Modifies Windows Firewall
-
Disables service(s)
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
3Windows Service
3Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
2Disable or Modify System Firewall
2Modify Registry
2