General
- Target jaffacakes118_New_Key_Premiere[NDS_Patch_MX04].exe
- Size 4.8MB
- Sample260910-d9wjcaytfs
- SHA256 bace4162337553c44097548911c5eae188de61b9c012e05267de131ea4c802b1
- MD5 ee9b3f39826775e684e19940e6f8d579
- SHA1 b260e4858d1288cb7d4bd683b7f32831d5cf3b39
- SHA512 1a514ef931528c447314ab3a481625220e67adeb905410b3deb8ade1d7934c468bc9e5f4772914951b8246194a44f6c9e4762ef6aba31b0319d0040fb0753b26
- SSDEEP 12288:aldJFCUAu7AHaahpwaxo1f1sxPP6MBJ/SKz4r:aKUAuI4Oo/yr/SKzY
- TLSH T162362378E801E507E31E58388D5B1489680CA670509EB6DFE76B3EA95831DEBC3FC716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_New_Key_Premiere[NDS_Patch_MX04].exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_New_Key_Premiere[NDS_Patch_MX04].exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_New_Key_Premiere[NDS_Patch_MX04].exe
- Size 4.8MB
- SHA256 bace4162337553c44097548911c5eae188de61b9c012e05267de131ea4c802b1
- MD5 ee9b3f39826775e684e19940e6f8d579
- SHA1 b260e4858d1288cb7d4bd683b7f32831d5cf3b39
- SHA512 1a514ef931528c447314ab3a481625220e67adeb905410b3deb8ade1d7934c468bc9e5f4772914951b8246194a44f6c9e4762ef6aba31b0319d0040fb0753b26
- SSDEEP 12288:aldJFCUAu7AHaahpwaxo1f1sxPP6MBJ/SKz4r:aKUAuI4Oo/yr/SKzY
- TLSH T162362378E801E507E31E58388D5B1489680CA670509EB6DFE76B3EA95831DEBC3FC716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext