General
- Target jaffacakes118_Handy Unlocker.exe
- Size 7.6MB
- Sample260910-dsdl7sxxd1
- SHA256 0fee3778a6dae929c59dc2bf95fff5edf9c9bc3006adc0b6e1523b28b289ef1d
- MD5 82a0839898fd98d28c1f50de8ad0f4a8
- SHA1 f99ba1eff7d6488f344833fdabb73ac62697c470
- SHA512 bfccbb53359d2915aad7d8e5a76511f3073cce097c7198711a24b8d8b867c74fed1a1e253089c3af707a83e60126cfbc0d0acfcf6dafb4918f4403de1cbb5af3
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T10E86238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Handy Unlocker.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Handy Unlocker.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Handy Unlocker.exe
- Size 7.6MB
- SHA256 0fee3778a6dae929c59dc2bf95fff5edf9c9bc3006adc0b6e1523b28b289ef1d
- MD5 82a0839898fd98d28c1f50de8ad0f4a8
- SHA1 f99ba1eff7d6488f344833fdabb73ac62697c470
- SHA512 bfccbb53359d2915aad7d8e5a76511f3073cce097c7198711a24b8d8b867c74fed1a1e253089c3af707a83e60126cfbc0d0acfcf6dafb4918f4403de1cbb5af3
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T10E86238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext