General
- Target jaffacakes118_Trojan.Win32.Buzus.mqdo.9de65e3b34e65bba39690a005379fd63
- Size 1.1MB
- Sample261018-1pcxtsts9p
- SHA256 74e7f9a8a7ed89c3ac151f9ceae986ef33607aa85ea00858b72afc4c8709d366
- MD5 9de65e3b34e65bba39690a005379fd63
- SHA1 587b42a1f09018cc44023328567bac4de87e0cbd
- SHA512 09f0245e2d68edd24c56ecfa24d212ef92fa865afa21ac79c8a29a769b20763bb256f8a09faa269bbdf6a617861bd75b89a59e4f01e34017515d2d279fa45209
- SSDEEP 24576:Zc9vANcCnapiZMxRnSoG5sY+9Jpz//clzBC0GWcCI1HYZPuEy63JLAV:ZOj3S5GzclzEkj4cP/y6FAV
- TLSH T1E145F122F6E18537C0631ABC9DDBA355543ABF113E38684E7BF81D4C4E3A14278296DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Buzus.mqdo.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Buzus.mqdo.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Buzus.mqdo.9de65e3b34e65bba39690a005379fd63
- Size 1.1MB
- SHA256 74e7f9a8a7ed89c3ac151f9ceae986ef33607aa85ea00858b72afc4c8709d366
- MD5 9de65e3b34e65bba39690a005379fd63
- SHA1 587b42a1f09018cc44023328567bac4de87e0cbd
- SHA512 09f0245e2d68edd24c56ecfa24d212ef92fa865afa21ac79c8a29a769b20763bb256f8a09faa269bbdf6a617861bd75b89a59e4f01e34017515d2d279fa45209
- SSDEEP 24576:Zc9vANcCnapiZMxRnSoG5sY+9Jpz//clzBC0GWcCI1HYZPuEy63JLAV:ZOj3S5GzclzEkj4cP/y6FAV
- TLSH T1E145F122F6E18537C0631ABC9DDBA355543ABF113E38684E7BF81D4C4E3A14278296DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext