General
- Target jaffacakes118_EF StartUp Manager 4.10.exe
- Size 4.6MB
- Sample260910-drz4tavhjb
- SHA256 2c82da7bbb376a80df029dc3a85cab3b4abfa21c402efcfda7c285223e8a8a0c
- MD5 c2538aa67c427948419ff8e47ba6a46c
- SHA1 af9551a9d9a4cb03cabfd1db314096a70acad24a
- SHA512 b9d3ca83557bb48ac088d65bb287384b5af85a4f256db817a100d44f8ad9566299654077b31eb95624fcd4def89d581377b0c02217b7ee598412243568666159
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T16826238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_EF StartUp Manager 4.10.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_EF StartUp Manager 4.10.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_EF StartUp Manager 4.10.exe
- Size 4.6MB
- SHA256 2c82da7bbb376a80df029dc3a85cab3b4abfa21c402efcfda7c285223e8a8a0c
- MD5 c2538aa67c427948419ff8e47ba6a46c
- SHA1 af9551a9d9a4cb03cabfd1db314096a70acad24a
- SHA512 b9d3ca83557bb48ac088d65bb287384b5af85a4f256db817a100d44f8ad9566299654077b31eb95624fcd4def89d581377b0c02217b7ee598412243568666159
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T16826238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext