General
- Target jaffacakes118_Blue White Theme 1.0.exe
- Size 6.7MB
- Sample260910-drm49aej6v
- SHA256 08821e9fb33ebc208290eee331ec5ce1ec3f2a29ea64a9666d5c78d006cc829b
- MD5 e83d54ff7ce189e657b6de3d8acfb3e0
- SHA1 5b5c831142a40109bceff8d314b17f174816a570
- SHA512 d80909a2750a56206eeb268c78d6a027d980544614c976c6a1831a8d0eb1c0a1a8b64eb2ea014423dc2e2ce6400beb7fa094ea2df3e8d72194b2cf7e3876280c
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T19366238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Blue White Theme 1.0.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Blue White Theme 1.0.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Blue White Theme 1.0.exe
- Size 6.7MB
- SHA256 08821e9fb33ebc208290eee331ec5ce1ec3f2a29ea64a9666d5c78d006cc829b
- MD5 e83d54ff7ce189e657b6de3d8acfb3e0
- SHA1 5b5c831142a40109bceff8d314b17f174816a570
- SHA512 d80909a2750a56206eeb268c78d6a027d980544614c976c6a1831a8d0eb1c0a1a8b64eb2ea014423dc2e2ce6400beb7fa094ea2df3e8d72194b2cf7e3876280c
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T19366238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext