General
- Target jaffacakes118_Trojan.Win32.Inject.aihty.013d036723b5728c3497c0333e6d1199
- Size 7.0MB
- Sample261018-w2yylstses
- SHA256 3a2f34eff99e42deb5336fbf3181b57424331ad0e79a9fcd690be1df57c39033
- MD5 013d036723b5728c3497c0333e6d1199
- SHA1 fbd7aab485947b5b63c2263c6c2ed37d797f1cfc
- SHA512 e8be5d12ffc82639555dfd0f8d8931e9986e2188268648e33c4342191c329dc6dadec927f30af943d6bea786d19c542c793c75af74909196f61c7ce70730a4c8
- SSDEEP 98304:F+5qRGUAVFhIRT0I7qREG4teItCoQ9aFPlwaC8FrQ9aFd:IUAvhItWSG48mzQIVlrtpQID
- TLSH T1FD76AE27B2C2EE7FC08F0A3A6626E6545B3E5B6115158D8A5BF5088CCE36CC1373E54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.aihty.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.aihty.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.aihty.013d036723b5728c3497c0333e6d1199
- Size 7.0MB
- SHA256 3a2f34eff99e42deb5336fbf3181b57424331ad0e79a9fcd690be1df57c39033
- MD5 013d036723b5728c3497c0333e6d1199
- SHA1 fbd7aab485947b5b63c2263c6c2ed37d797f1cfc
- SHA512 e8be5d12ffc82639555dfd0f8d8931e9986e2188268648e33c4342191c329dc6dadec927f30af943d6bea786d19c542c793c75af74909196f61c7ce70730a4c8
- SSDEEP 98304:F+5qRGUAVFhIRT0I7qREG4teItCoQ9aFPlwaC8FrQ9aFd:IUAvhItWSG48mzQIVlrtpQID
- TLSH T1FD76AE27B2C2EE7FC08F0A3A6626E6545B3E5B6115158D8A5BF5088CCE36CC1373E54B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext