General
- Target jaffacakes118_Trojan.Win32.Inject.aihty.013d036723b5728c3497c0333e6d1199
- Size 7.0MB
- Sample261018-w2yylstses
- SHA256 3a2f34eff99e42deb5336fbf3181b57424331ad0e79a9fcd690be1df57c39033
- MD5 013d036723b5728c3497c0333e6d1199
- SHA1 fbd7aab485947b5b63c2263c6c2ed37d797f1cfc
- SHA512 e8be5d12ffc82639555dfd0f8d8931e9986e2188268648e33c4342191c329dc6dadec927f30af943d6bea786d19c542c793c75af74909196f61c7ce70730a4c8
- SSDEEP 98304:F+5qRGUAVFhIRT0I7qREG4teItCoQ9aFPlwaC8FrQ9aFd:IUAvhItWSG48mzQIVlrtpQID
- TLSH T1FD76AE27B2C2EE7FC08F0A3A6626E6545B3E5B6115158D8A5BF5088CCE36CC1373E54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.aihty.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.aihty.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.aihty.013d036723b5728c3497c0333e6d1199
- Size 7.0MB
- SHA256 3a2f34eff99e42deb5336fbf3181b57424331ad0e79a9fcd690be1df57c39033
- MD5 013d036723b5728c3497c0333e6d1199
- SHA1 fbd7aab485947b5b63c2263c6c2ed37d797f1cfc
- SHA512 e8be5d12ffc82639555dfd0f8d8931e9986e2188268648e33c4342191c329dc6dadec927f30af943d6bea786d19c542c793c75af74909196f61c7ce70730a4c8
- SSDEEP 98304:F+5qRGUAVFhIRT0I7qREG4teItCoQ9aFPlwaC8FrQ9aFd:IUAvhItWSG48mzQIVlrtpQID
- TLSH T1FD76AE27B2C2EE7FC08F0A3A6626E6545B3E5B6115158D8A5BF5088CCE36CC1373E54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
Suspicious use of SetThreadContext