General
- Target jaffacakes118_Trojan.Win32.Inject.vegq.4185a1687623e3d7b5b235b0b2d66454
- Size 539KB
- Sample261018-vr8jmasth1
- SHA256 e195d120820e6838e29cb1061593eaa397aea309155658332eb12daf1697a26b
- MD5 4185a1687623e3d7b5b235b0b2d66454
- SHA1 8b8778647219148fd4a04004925ed8d65e8c4bcc
- SHA512 f4c0edf8b51b6098f7a466b10c0985faab58cd26eab849860a76708860e1622f8fc59f4251f3335952c08d1e4cb4e6b1e2f3cb91b1c94f23eb67a68187d78527
- SSDEEP 12288:Z0D8koTs1N+bR4eH1xTGZGkWhpGFwzcxHU3N9/vB4/:htIcyerTGYbMFwhNf4
- TLSH T11BC4F152ABA49CF0D4B2767199B3CA768F3BBD376534400B26D53E230E70AA32476753
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.vegq.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.vegq.exe
Resource
win11ltsc2024-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.vegq.4185a1687623e3d7b5b235b0b2d66454
- Size 539KB
- SHA256 e195d120820e6838e29cb1061593eaa397aea309155658332eb12daf1697a26b
- MD5 4185a1687623e3d7b5b235b0b2d66454
- SHA1 8b8778647219148fd4a04004925ed8d65e8c4bcc
- SHA512 f4c0edf8b51b6098f7a466b10c0985faab58cd26eab849860a76708860e1622f8fc59f4251f3335952c08d1e4cb4e6b1e2f3cb91b1c94f23eb67a68187d78527
- SSDEEP 12288:Z0D8koTs1N+bR4eH1xTGZGkWhpGFwzcxHU3N9/vB4/:htIcyerTGYbMFwhNf4
- TLSH T11BC4F152ABA49CF0D4B2767199B3CA768F3BBD376534400B26D53E230E70AA32476753
- MD5 SHA1 SHA512 SSDEEP TLSH
Adds policy Run key to start application
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
3Process Injection
2Process Hollowing
1