General
- Target jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f
- Size 4.1MB
- Sample261018-166lgabs71
- SHA256 d991aade5bab199ffed94dbd004b11e709daa3b257eb2e8be2cc8b6cf62f121f
- MD5 24293996f8f11323226fa1ceb6cd2f7f
- SHA1 d2f6525706493a975e163d0fe41b40338e48bc4b
- SHA512 8291c3fc6695285c898d9f3446a30160715d6c1a1f4a76f7c633b7344768264111e561a142dec1466517f3073dab3ea69a2c23ad37a00e6fc56f34a9e183e71e
- SSDEEP 98304:5M0Jhw4ZAqCUa8ne3897dkcrI0J5EVG8MWKcoZK7nq1HOfynLv:5N5CUaMeouLKLctbq8fsb
- TLSH T1591623172142EE3AD055F63AE493E73D227BC8155E628342A7B28EB18F71EF197D404E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Chapak.ayaw.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Chapak.ayaw.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Chapak.ayaw.24293996f8f11323226fa1ceb6cd2f7f
- Size 4.1MB
- SHA256 d991aade5bab199ffed94dbd004b11e709daa3b257eb2e8be2cc8b6cf62f121f
- MD5 24293996f8f11323226fa1ceb6cd2f7f
- SHA1 d2f6525706493a975e163d0fe41b40338e48bc4b
- SHA512 8291c3fc6695285c898d9f3446a30160715d6c1a1f4a76f7c633b7344768264111e561a142dec1466517f3073dab3ea69a2c23ad37a00e6fc56f34a9e183e71e
- SSDEEP 98304:5M0Jhw4ZAqCUa8ne3897dkcrI0J5EVG8MWKcoZK7nq1HOfynLv:5N5CUaMeouLKLctbq8fsb
- TLSH T1591623172142EE3AD055F63AE493E73D227BC8155E628342A7B28EB18F71EF197D404E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Glupteba payload
-
Modifies Windows Firewall
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2Subvert Trust Controls
2Install Root Certificate
2