General
- Target jaffacakes118_not-a-virus.AdWare.Win32.DLBoost.brov.92a7920a33cf509bde08895aec02791b
- Size 3.6MB
- Sample261018-tk2baszw4j
- SHA256 167e68d5548aac1de331243b1465ed9ec009e3bec2594937cf8930e1364694af
- MD5 92a7920a33cf509bde08895aec02791b
- SHA1 4dc3019afd067eb3c42a80fd27b90c0c7952acb1
- SHA512 d2361728d76817d046e507939bb8107e310385088a2f1344b2543765f921543fab4b9e773684751e6dd2bac3909603b8b4bb6e1e6e93a5881067e8d920959b98
- SSDEEP 49152:XXBrEp1Uz1v/pFY9T8EotHObIuHSRsj0Zuur1T75YhBrmNtqL0LnG+v98d:X1Ep1Uz1v/0AuNdJg1SrmNtIl+k
- TLSH T1D8068E11F6A08C37E9776B3B8CB672C49DAEB9132D3464CB32944E0C9F7768129522D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.AdWare.Win32.DLBoost.brov.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.AdWare.Win32.DLBoost.brov.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.AdWare.Win32.DLBoost.brov.92a7920a33cf509bde08895aec02791b
- Size 3.6MB
- SHA256 167e68d5548aac1de331243b1465ed9ec009e3bec2594937cf8930e1364694af
- MD5 92a7920a33cf509bde08895aec02791b
- SHA1 4dc3019afd067eb3c42a80fd27b90c0c7952acb1
- SHA512 d2361728d76817d046e507939bb8107e310385088a2f1344b2543765f921543fab4b9e773684751e6dd2bac3909603b8b4bb6e1e6e93a5881067e8d920959b98
- SSDEEP 49152:XXBrEp1Uz1v/pFY9T8EotHObIuHSRsj0Zuur1T75YhBrmNtqL0LnG+v98d:X1Ep1Uz1v/0AuNdJg1SrmNtIl+k
- TLSH T1D8068E11F6A08C37E9776B3B8CB672C49DAEB9132D3464CB32944E0C9F7768129522D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.