General
- Target jaffacakes118_Trojan.Win32.FakeAV.ezr.07e014dc87fc7f0b53676065bd35f6a3
- Size 650KB
- Sample261018-x7w7mstycx
- SHA256 53f0e789d99816d9ed9bd1bb029f0c1bb613c369007e32d0a6939a234c8812e0
- MD5 07e014dc87fc7f0b53676065bd35f6a3
- SHA1 95767792ee2d847130d1c35b4992fc9b22e6071f
- SHA512 885e5dada5d2e56d3d06f75bd3cb82d6f7a3dd7248d415f7fa066a239db9766bc4319c9caa89008f7adf9ec473e6a844ec2b9df09a4eb67e998b91701707abb1
- SSDEEP 12288:pskP95IwcJiyug+WGOQwKxnfgYmmX13D8aCxudM/ZgiXU9warN0n:ekFrqiyug+WXQwKBfjmmXV8buOBgkU9L
- TLSH T1E9E423CFA7A84D43F4E142315A308F1DD079D9B19699074E22E46E6A9FBD3B4BC00AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.FakeAV.ezr.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.FakeAV.ezr.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.FakeAV.ezr.07e014dc87fc7f0b53676065bd35f6a3
- Size 650KB
- SHA256 53f0e789d99816d9ed9bd1bb029f0c1bb613c369007e32d0a6939a234c8812e0
- MD5 07e014dc87fc7f0b53676065bd35f6a3
- SHA1 95767792ee2d847130d1c35b4992fc9b22e6071f
- SHA512 885e5dada5d2e56d3d06f75bd3cb82d6f7a3dd7248d415f7fa066a239db9766bc4319c9caa89008f7adf9ec473e6a844ec2b9df09a4eb67e998b91701707abb1
- SSDEEP 12288:pskP95IwcJiyug+WGOQwKxnfgYmmX13D8aCxudM/ZgiXU9warN0n:ekFrqiyug+WXQwKBfjmmXV8buOBgkU9L
- TLSH T1E9E423CFA7A84D43F4E142315A308F1DD079D9B19699074E22E46E6A9FBD3B4BC00AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE