General
- Target jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2
- Size 5.4MB
- Sample261018-w7behaf15p
- SHA256 8a6fa5da96d15583615ff9b3f9982b87b6990c5728fc3e111460ebf7961b43f1
- MD5 2a6a56c22e52f8d60acd6730cf83d8c2
- SHA1 2b4bf64e4cb37d1f420575533a4a7805b2ac6f95
- SHA512 7e0301136f298423c3a84b4cb5df52c6e6d5d8917f32e621430fce9d656a379999fae7a1c6ce6b3c589a41195e6d1ad19d993bc4b0a0313b2f24421a2dd115b7
- SSDEEP 49152:fKUSWXRuZcSWExhZfr8OUDSmPvMiPU3hy8ZYzHP93D9UbthMNHKQPU3hy8ZYzHPX:y6XYfhu/xw69GXUKgw6YSTnIc
- TLSH T18D46C023E251E63FC05B067D4927A6AC5E3E6A511665CC8B7AF10C8CCF75983363E24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.aismi.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.aismi.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.aismi.2a6a56c22e52f8d60acd6730cf83d8c2
- Size 5.4MB
- SHA256 8a6fa5da96d15583615ff9b3f9982b87b6990c5728fc3e111460ebf7961b43f1
- MD5 2a6a56c22e52f8d60acd6730cf83d8c2
- SHA1 2b4bf64e4cb37d1f420575533a4a7805b2ac6f95
- SHA512 7e0301136f298423c3a84b4cb5df52c6e6d5d8917f32e621430fce9d656a379999fae7a1c6ce6b3c589a41195e6d1ad19d993bc4b0a0313b2f24421a2dd115b7
- SSDEEP 49152:fKUSWXRuZcSWExhZfr8OUDSmPvMiPU3hy8ZYzHP93D9UbthMNHKQPU3hy8ZYzHPX:y6XYfhu/xw69GXUKgw6YSTnIc
- TLSH T18D46C023E251E63FC05B067D4927A6AC5E3E6A511665CC8B7AF10C8CCF75983363E24B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext