General
- Target jaffacakes118_Armed And Dangerous - DEViANCE (PC.ENG).exe
- Size 11.4MB
- Sample260910-db4gasdn6s
- SHA256 2d63f4ee1efbd1d4384eab4a0da9a8b0ea62968fd3ed663858f8a60c0259b849
- MD5 6fac82ff19fbaa7dc89396a1342ac54c
- SHA1 1c765eca2eeaf057115a943784ac105bca52e46c
- SHA512 640c8daaa8ea8da9ebc5f05a0cf12dd6d350aabab2b47a58d9a9b655c094c6da4e9da19d777729e4e87a2c68308896ce14f9b8f93b5aa6934bd611f777ffe0ff
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T10DC6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Armed And Dangerous - DEViANCE (PC.ENG).exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Armed And Dangerous - DEViANCE (PC.ENG).exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Armed And Dangerous - DEViANCE (PC.ENG).exe
- Size 11.4MB
- SHA256 2d63f4ee1efbd1d4384eab4a0da9a8b0ea62968fd3ed663858f8a60c0259b849
- MD5 6fac82ff19fbaa7dc89396a1342ac54c
- SHA1 1c765eca2eeaf057115a943784ac105bca52e46c
- SHA512 640c8daaa8ea8da9ebc5f05a0cf12dd6d350aabab2b47a58d9a9b655c094c6da4e9da19d777729e4e87a2c68308896ce14f9b8f93b5aa6934bd611f777ffe0ff
- SSDEEP 1536:PYFpEddxllL+RMeLgXWXPLJizHVv/7cORCchyQTTwIvT2c3AQ:PYFpixDL+RHgG/LAzl/QRcpTMDc3T
- TLSH T10DC6D00DAAC91A26E8EE077CECDF5341C376D8029913DB4F4EFC48096A5B7B28615787
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory