General
- Target jaffacakes118_setup_82h9brv4.exe
- Size 4.0MB
- Sample260910-ct3r2sef68
- SHA256 c56f8288415867a4eee3a583c6359a29fa2e2af9af75286054ec48fc9655a09d
- MD5 fea74d6a6cd91e243ff04523b01bafb4
- SHA1 33bc121109141af7a8207335dedbc12b6486bdec
- SHA512 3ff9ca7188d0643b33112ae4c1dd313d4d9a2b6b73b627419716b098491fdc30fb6e79dd3a8751de10a7c996e5a243f03c5ae7c0772150eef5d896e91f9cc664
- SSDEEP 98304:XzeI8sh7aciOIpWcCQ3mqtYMgxEazB4LdV1QsQ4+tfn2tqj:XiNsh7K3Uvqt2P14LztO2tqj
- TLSH T191163354BAABCA7DEA19623C0F04D809B76451EE0173FFB953EEAA5C2C610107E7C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_setup_82h9brv4.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_setup_82h9brv4.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_setup_82h9brv4.exe
- Size 4.0MB
- SHA256 c56f8288415867a4eee3a583c6359a29fa2e2af9af75286054ec48fc9655a09d
- MD5 fea74d6a6cd91e243ff04523b01bafb4
- SHA1 33bc121109141af7a8207335dedbc12b6486bdec
- SHA512 3ff9ca7188d0643b33112ae4c1dd313d4d9a2b6b73b627419716b098491fdc30fb6e79dd3a8751de10a7c996e5a243f03c5ae7c0772150eef5d896e91f9cc664
- SSDEEP 98304:XzeI8sh7aciOIpWcCQ3mqtYMgxEazB4LdV1QsQ4+tfn2tqj:XiNsh7K3Uvqt2P14LztO2tqj
- TLSH T191163354BAABCA7DEA19623C0F04D809B76451EE0173FFB953EEAA5C2C610107E7C758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.