jaffacakes118_Worm.Win32.WBNA.ipa.1cb51bbfbdd462f04acfd8ba4f7a1cb2
Classification: Malicious
jaffacakes118_Worm.Win32.WBNA.ipa.1cb51bbfbdd462f04acfd8ba4f7a1cb2 is a malicious file sample (Windows executable, 152.2 KB). Linked to Poisonivy malware.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 6 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: POISONIVY (S0012)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Poisonivy | Triage | 2026-10-14 13:21:19 | 2026-10-14 13:21:19 | malicious-activity | S0012 PoisonIvy |
| Generic Malware | Hybrid-Analysis | 2024-12-11 07:00:06 | 2024-12-11 08:30:11 |
Tags
vobfus poisonivy bootkit discovery persistence ratSample information
- Filenames
- jaffacakes118_Worm.Win32.WBNA.ipa.1cb51bbfbdd462f04acfd8ba4f7a1cb2, 578059e9249439237eae0ffd84ecab9fe23145ef4b7139de76f4af9522f203c3
- File type
- MS-DOS executable PE32 executable (GUI) Intel 8038 ...
- Size
- 155903 bytes
- MD5
1cb51bbfbdd462f04acfd8ba4f7a1cb2- SHA-1
4623d1f4082b29259f8613d7bb9d0344ad0adfa8- SHA-256
578059e9249439237eae0ffd84ecab9fe23145ef4b7139de76f4af9522f203c3- First indexed
- 2024-12-11 06:47:47
- Last updated
- 2026-10-15 14:16:55
Process list
| Name | Command line |
|---|---|
| 578059e9249439237eae0ffd84ecab9fe23145ef4b7139de76f4af9522f203c3.exe | |
| WerFault.exe | -u -p 7420 -s 460 |
| WerFault.exe | -u -p 7420 -s 460 |
| WerFault.exe | -u -p 7420 -s 452 |
| WerFault.exe | -pss -s 440 -p 7420 -ip 7420 |
| WerFault.exe | -pss -s 504 -p 7420 -ip 7420 |