General
- Target c4f6c46caff0a633015943c076b55e78_JaffaCakes118
- Size 906KB
- Sample240827-paanda1fkp
- SHA256 fb081199ada745e95dedc88284ba2504ce879cbfc6dd86243bb5bbee6cc153b9
- MD5 c4f6c46caff0a633015943c076b55e78
- SHA1 edf7c89bfe1d4bf36d17d83e05a895c0f9938e1f
- SHA512 77ce40a96bfc3a9e32e346724101c9470e0a8c465a1a3232d8556b5f960ab5c552a5e309480faf1cc6ec7bdc58a4b5c95cafa11b2bb5dfc22e2320bc96af32fa
- SSDEEP 12288:v05a/N5c4SeAjKPDKXXhzfNwaW8wkEsI0mhyUQU8UjMG:v00YKPDSzfAkmdbQz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c4f6c46caff0a633015943c076b55e78_JaffaCakes118.exe
Resource
win7-20240708-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c4f6c46caff0a633015943c076b55e78_JaffaCakes118.exe
Resource
win10v2004-20240802-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c4f6c46caff0a633015943c076b55e78_JaffaCakes118
- Size 906KB
- SHA256 fb081199ada745e95dedc88284ba2504ce879cbfc6dd86243bb5bbee6cc153b9
- MD5 c4f6c46caff0a633015943c076b55e78
- SHA1 edf7c89bfe1d4bf36d17d83e05a895c0f9938e1f
- SHA512 77ce40a96bfc3a9e32e346724101c9470e0a8c465a1a3232d8556b5f960ab5c552a5e309480faf1cc6ec7bdc58a4b5c95cafa11b2bb5dfc22e2320bc96af32fa
- SSDEEP 12288:v05a/N5c4SeAjKPDKXXhzfNwaW8wkEsI0mhyUQU8UjMG:v00YKPDSzfAkmdbQz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
TriumphLoader
TriumphLoader is a c++ loader based on the open source AbsentLoader.
-
TriumphLoader payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.