General
- Target jaffacakes118_Ancient Spirits.exe
- Size 12.7MB
- Sample260910-d5jc8aysct
- SHA256 a27bd6a8814454089e23c543ddee8f685c711b1a3665af2c973375d1bdc394cb
- MD5 e330df4d04ec8fc715aab1d9d1cef7d1
- SHA1 4a3ac6b830a5d55e443fc2b6eb2ded7a4eceef59
- SHA512 7367e6f38c8f9575165061e835e985a11028c12056564364ef90294fc7f1f0365d9d2fbef65198f5be5b80c09f44df66915f10e5de2192205bd13cc066a39d76
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T134D6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Ancient Spirits.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Ancient Spirits.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Ancient Spirits.exe
- Size 12.7MB
- SHA256 a27bd6a8814454089e23c543ddee8f685c711b1a3665af2c973375d1bdc394cb
- MD5 e330df4d04ec8fc715aab1d9d1cef7d1
- SHA1 4a3ac6b830a5d55e443fc2b6eb2ded7a4eceef59
- SHA512 7367e6f38c8f9575165061e835e985a11028c12056564364ef90294fc7f1f0365d9d2fbef65198f5be5b80c09f44df66915f10e5de2192205bd13cc066a39d76
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T134D6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory