General
- Target jaffacakes118_AntWar PC Setup [Hyperdrive25].exe
- Size 12.3MB
- Sample260910-d7dkrayshw
- SHA256 4d534d0500d6b1a97cf4297c41cd94c074c0c57f25437c7550a970dc1a3b0edf
- MD5 5154d565c4b94f0a59a8d0f03044077f
- SHA1 c639c616aa739b5ccb05bb886094aeebf526ecb8
- SHA512 7b1aabb40529d7216562a4f40e8ac5d63bdacbf6dd8e68a30e574b484f5d604ddde4acbb15ec7b00828f9e4cc5317a2e7a8b2c19e5d1063ef0b156337d97e7cf
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T1F7D6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_AntWar PC Setup [Hyperdrive25].exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_AntWar PC Setup [Hyperdrive25].exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_AntWar PC Setup [Hyperdrive25].exe
- Size 12.3MB
- SHA256 4d534d0500d6b1a97cf4297c41cd94c074c0c57f25437c7550a970dc1a3b0edf
- MD5 5154d565c4b94f0a59a8d0f03044077f
- SHA1 c639c616aa739b5ccb05bb886094aeebf526ecb8
- SHA512 7b1aabb40529d7216562a4f40e8ac5d63bdacbf6dd8e68a30e574b484f5d604ddde4acbb15ec7b00828f9e4cc5317a2e7a8b2c19e5d1063ef0b156337d97e7cf
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T1F7D6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory