General
- Target jaffacakes118_Daemon Tools Pro Advanced 4.40.exe
- Size 1.1MB
- Sample260910-d4v1mawcpb
- SHA256 ac88f240f27e185fafa3d1184be564eb5c610a9440f3a1dccf9dc0664476815c
- MD5 431c1a90e68545af01f0b1db1905c259
- SHA1 71763af563f658415d09285a46f1a37bd9642b02
- SHA512 466b0e652f8cbc4d991ff74e3b15cc67d4fa460477beb269c75df4a4755e97211160d97d2178e40a59c696c9aa506c76e542c2f45fb2e1f9ac3308ee1f1bde98
- SSDEEP 24576:XB1I55h9/11+gnyQeu6JUUgbgmbSeyMojBf8sYnJDS6sAT3GSmh:XB1IJMeeu6JuVbSoojBksYnJDSqK3h
- TLSH T12735D0037390E050E1129AF53255C2E4B6B5783517196A4FFEC13B1AABB9BDD8730BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Daemon Tools Pro Advanced 4.40.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Daemon Tools Pro Advanced 4.40.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Daemon Tools Pro Advanced 4.40.exe
- Size 1.1MB
- SHA256 ac88f240f27e185fafa3d1184be564eb5c610a9440f3a1dccf9dc0664476815c
- MD5 431c1a90e68545af01f0b1db1905c259
- SHA1 71763af563f658415d09285a46f1a37bd9642b02
- SHA512 466b0e652f8cbc4d991ff74e3b15cc67d4fa460477beb269c75df4a4755e97211160d97d2178e40a59c696c9aa506c76e542c2f45fb2e1f9ac3308ee1f1bde98
- SSDEEP 24576:XB1I55h9/11+gnyQeu6JUUgbgmbSeyMojBf8sYnJDS6sAT3GSmh:XB1IJMeeu6JuVbSoojBksYnJDSqK3h
- TLSH T12735D0037390E050E1129AF53255C2E4B6B5783517196A4FFEC13B1AABB9BDD8730BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext