General
- Target jaffacakes118_Feyruna - der Feenwald 1.3.exe
- Size 7.9MB
- Sample260910-djdkvadq5x
- SHA256 17d58d1ab2b0974ffd2bcca1bbf00d6c1cddc81464ad6107837dff275f944363
- MD5 9c960608bb9849edc41f959bb62e76a3
- SHA1 bc72696fa005a0fa27390b1463790e3d9a02677c
- SHA512 54d7fbb75d2bd85015defd67c67c86f96e0a5cdf881a8918ec8a11853848525fa53c2e1ec0def9d5388d0792a5264e7dda4f8c4b4e5c47603e70af11cee48584
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T1E886238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Feyruna - der Feenwald 1.3.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Feyruna - der Feenwald 1.3.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Feyruna - der Feenwald 1.3.exe
- Size 7.9MB
- SHA256 17d58d1ab2b0974ffd2bcca1bbf00d6c1cddc81464ad6107837dff275f944363
- MD5 9c960608bb9849edc41f959bb62e76a3
- SHA1 bc72696fa005a0fa27390b1463790e3d9a02677c
- SHA512 54d7fbb75d2bd85015defd67c67c86f96e0a5cdf881a8918ec8a11853848525fa53c2e1ec0def9d5388d0792a5264e7dda4f8c4b4e5c47603e70af11cee48584
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T1E886238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext