General
- Target jaffacakes118_Trojan.Win32.Inject.ahwau.27d254795a51a1977d22a81f943e94a6
- Size 7.9MB
- Sample261018-wtaaaafw9q
- SHA256 5918150353c5b0be5357250c81aae2a8ada0ea8c4a05f20f9f58cfd301fb8117
- MD5 27d254795a51a1977d22a81f943e94a6
- SHA1 59a89ce22dafb4c5f7a18ff65bfd092657a58d18
- SHA512 192275084e4426db917cf9e0251636125ce68b4776ccf61fb7c67c2a2de9fc46287b49c6192ba84186a20d0391ca456620bc132ce6e3c95e798333106b2423c5
- SSDEEP 98304:yHcZwh+UmlSlfHZ74PnPRpvMVte8nffCuCiu+XXmDCp3lr+Ip2jm:0h7mQlfHZQPRpvMFiuC6cCH/V
- TLSH T15D86E03650CAE53FC49B073A04A7A1118F3E6F581117DC5799F98EAC8E7A54031BA78F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.ahwau.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.ahwau.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.ahwau.27d254795a51a1977d22a81f943e94a6
- Size 7.9MB
- SHA256 5918150353c5b0be5357250c81aae2a8ada0ea8c4a05f20f9f58cfd301fb8117
- MD5 27d254795a51a1977d22a81f943e94a6
- SHA1 59a89ce22dafb4c5f7a18ff65bfd092657a58d18
- SHA512 192275084e4426db917cf9e0251636125ce68b4776ccf61fb7c67c2a2de9fc46287b49c6192ba84186a20d0391ca456620bc132ce6e3c95e798333106b2423c5
- SSDEEP 98304:yHcZwh+UmlSlfHZ74PnPRpvMVte8nffCuCiu+XXmDCp3lr+Ip2jm:0h7mQlfHZQPRpvMFiuC6cCH/V
- TLSH T15D86E03650CAE53FC49B073A04A7A1118F3E6F581117DC5799F98EAC8E7A54031BA78F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext