General
- Target jaffacakes118_Alice. Madness Returns PROPER @Sbf93.exe
- Size 12.1MB
- Sample260910-d1lb1swbnb
- SHA256 58a656af84bd1f1f5002c438567ba9f5b3c446b58ff3382b8f5971b2adc1e5b0
- MD5 adb3f73f32163dd94432581d35e42901
- SHA1 09a8c1aed2f235f28dec25bd32f8c01f78558523
- SHA512 07bfa919fb7c4d8ceb7c307c161afece92f63bb4f63628224c5411a144e86e9d32bf468207b44a9f1a82a8d3270629eb78c3fbe02ec62ad3177facab7c3d1416
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T18CD6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Alice. Madness Returns PROPER @Sbf93.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Alice. Madness Returns PROPER @Sbf93.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Alice. Madness Returns PROPER @Sbf93.exe
- Size 12.1MB
- SHA256 58a656af84bd1f1f5002c438567ba9f5b3c446b58ff3382b8f5971b2adc1e5b0
- MD5 adb3f73f32163dd94432581d35e42901
- SHA1 09a8c1aed2f235f28dec25bd32f8c01f78558523
- SHA512 07bfa919fb7c4d8ceb7c307c161afece92f63bb4f63628224c5411a144e86e9d32bf468207b44a9f1a82a8d3270629eb78c3fbe02ec62ad3177facab7c3d1416
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T18CD6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory