General
- Target jaffacakes118_PSD Abstract Background.exe
- Size 893KB
- Sample260910-ds9pmsvhme
- SHA256 dd7fdd0f9040f2f2cde3ce84e323b8ad4f1b9f43d93796f14ea7298fa9d511f1
- MD5 5ec0535756781c62ffb0dc88e06fa1a6
- SHA1 d19765d38089d9aa8312469ff89231183e281cae
- SHA512 25f7c67eecf257b88279b75f4d9d744e94e9f756319ca4a97ce85097b6a018f64ee2c6a424b348b777ef93bfbeaf72772768902787292c117217ab9e0abc2754
- SSDEEP 24576:hwIxB2m6kgFlqx1/jI75Wc5BYWmQIx0SYOXct6T:hwCB21FUxyv0x0SKtw
- TLSH T191156B32F681D4B2E1623AFC4D1BD6D5582DBE209D28545B3AF43F4C1A3DA43ED2429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_PSD Abstract Background.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_PSD Abstract Background.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_PSD Abstract Background.exe
- Size 893KB
- SHA256 dd7fdd0f9040f2f2cde3ce84e323b8ad4f1b9f43d93796f14ea7298fa9d511f1
- MD5 5ec0535756781c62ffb0dc88e06fa1a6
- SHA1 d19765d38089d9aa8312469ff89231183e281cae
- SHA512 25f7c67eecf257b88279b75f4d9d744e94e9f756319ca4a97ce85097b6a018f64ee2c6a424b348b777ef93bfbeaf72772768902787292c117217ab9e0abc2754
- SSDEEP 24576:hwIxB2m6kgFlqx1/jI75Wc5BYWmQIx0SYOXct6T:hwCB21FUxyv0x0SKtw
- TLSH T191156B32F681D4B2E1623AFC4D1BD6D5582DBE209D28545B3AF43F4C1A3DA43ED2429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.