General
- Target jaffacakes118_Bluetooth Remote Control 2.0.exe
- Size 5.6MB
- Sample260910-dpkw4seh79
- SHA256 36a3ededb7684bfb4713e0bd94f87dac247076238107897f09fd76642064ba30
- MD5 bfa39e8907911e20a4015af824e7f13e
- SHA1 c403950d97586ce4dabb63cca825fae23ff6a20a
- SHA512 a9420d19d7da61992ce7abf23d17ae86f497651db1248a1612fad04ccdd83150b81ae8ed9f376aa6e033b341c9516c016c35f91a230bbca16a2b5dbf14aefec1
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T13C56238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Bluetooth Remote Control 2.0.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Bluetooth Remote Control 2.0.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Bluetooth Remote Control 2.0.exe
- Size 5.6MB
- SHA256 36a3ededb7684bfb4713e0bd94f87dac247076238107897f09fd76642064ba30
- MD5 bfa39e8907911e20a4015af824e7f13e
- SHA1 c403950d97586ce4dabb63cca825fae23ff6a20a
- SHA512 a9420d19d7da61992ce7abf23d17ae86f497651db1248a1612fad04ccdd83150b81ae8ed9f376aa6e033b341c9516c016c35f91a230bbca16a2b5dbf14aefec1
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T13C56238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext