General
- Target jaffacakes118_Alice Madness Returns @Sbf93.exe
- Size 12.8MB
- Sample260910-d3w7asem7x
- SHA256 76fb058e589ef15a8dd586a4fc75d81167abb9c87b67e2534fbbe55502613081
- MD5 d5046210001a3d69bcad0727d30ebb23
- SHA1 779f90c3470118d905b9e1d44f10334c76795272
- SHA512 7e1db3fc7292457cd448279ee5aea829681be0f5437b4cf8887a75e8f3bd96711cc5ca09af269045eff97dd4d2e4e4100273b7434e4bffe75b8d4814326e82ec
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T18BD6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Alice Madness Returns @Sbf93.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Alice Madness Returns @Sbf93.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Alice Madness Returns @Sbf93.exe
- Size 12.8MB
- SHA256 76fb058e589ef15a8dd586a4fc75d81167abb9c87b67e2534fbbe55502613081
- MD5 d5046210001a3d69bcad0727d30ebb23
- SHA1 779f90c3470118d905b9e1d44f10334c76795272
- SHA512 7e1db3fc7292457cd448279ee5aea829681be0f5437b4cf8887a75e8f3bd96711cc5ca09af269045eff97dd4d2e4e4100273b7434e4bffe75b8d4814326e82ec
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T18BD6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory