General
- Target jaffacakes118_Windows 7 Activator [2010-10-14].exe
- Size 814KB
- Sample260910-dgslzsvena
- SHA256 b2fd04d4373fa17f2681eaae11ed2e94ae99ade5e5ef85bede53e5006b9b2aa2
- MD5 d3f71f9af425d0cf5f2982126e5018b5
- SHA1 bd1974d652e0ec82bb0e326577f83e25ef280180
- SHA512 b080819c52811e0b649ed6673122b20935e9d95f9e425cfe45f791efe432aa0c9c7b0758712071e331aa8f121fcca3b1672c0f9c7ffeabaf3aa7a8c688457d7f
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuH:Ona1hiiMh4ci4wLZ5bsqnu5H
- TLSH T1FE059D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Windows 7 Activator [2010-10-14].exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Windows 7 Activator [2010-10-14].exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Windows 7 Activator [2010-10-14].exe
- Size 814KB
- SHA256 b2fd04d4373fa17f2681eaae11ed2e94ae99ade5e5ef85bede53e5006b9b2aa2
- MD5 d3f71f9af425d0cf5f2982126e5018b5
- SHA1 bd1974d652e0ec82bb0e326577f83e25ef280180
- SHA512 b080819c52811e0b649ed6673122b20935e9d95f9e425cfe45f791efe432aa0c9c7b0758712071e331aa8f121fcca3b1672c0f9c7ffeabaf3aa7a8c688457d7f
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuH:Ona1hiiMh4ci4wLZ5bsqnu5H
- TLSH T1FE059D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.