General
- Target jaffacakes118_Trojan.Win32.Inject.ahwpp.0d96db18d6d783ffd8fe3da50bac27d0
- Size 5.2MB
- Sample261018-wt2drsfx2n
- SHA256 51784ed79043a7fd3e1477309d7c08f4880321db13e919df8f456a6ad2019bd8
- MD5 0d96db18d6d783ffd8fe3da50bac27d0
- SHA1 ee7e0cfece58d83cd50b640437f7ace0cf78fa7c
- SHA512 578b956d951be45aed45707e91b8a669e9717cbcaf1397b97664f02bc351422eafa63fc601b8d5bbc8604da6edb496fd53d796db614fa3be2f0165faeb6fe2d9
- SSDEEP 98304:RGPTj1XCqW02jMMMZmKHmpnJcX2blxsXFrXAv+oDO3hwHijUFvxvlEL:RGrjg+242BaXFrE+oDIhwtFJtEL
- TLSH T1154633957BFAD0E9D252E5B3B38B824154AC152344C398E0BF5286DFC476D6238C7A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.ahwpp.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.ahwpp.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.ahwpp.0d96db18d6d783ffd8fe3da50bac27d0
- Size 5.2MB
- SHA256 51784ed79043a7fd3e1477309d7c08f4880321db13e919df8f456a6ad2019bd8
- MD5 0d96db18d6d783ffd8fe3da50bac27d0
- SHA1 ee7e0cfece58d83cd50b640437f7ace0cf78fa7c
- SHA512 578b956d951be45aed45707e91b8a669e9717cbcaf1397b97664f02bc351422eafa63fc601b8d5bbc8604da6edb496fd53d796db614fa3be2f0165faeb6fe2d9
- SSDEEP 98304:RGPTj1XCqW02jMMMZmKHmpnJcX2blxsXFrXAv+oDO3hwHijUFvxvlEL:RGrjg+242BaXFrE+oDIhwtFJtEL
- TLSH T1154633957BFAD0E9D252E5B3B38B824154AC152344C398E0BF5286DFC476D6238C7A8F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext