General
- Target jaffacakes118_multi password recovery 1.1 x - 1.2 x+ any editions generic.exe
- Size 446KB
- Sample260910-dxw94swapg
- SHA256 7c98aab198a07efd9c648505b47b18f09ddfdd48fd6cc1646f950e35ec1b1255
- MD5 d36790fc1337c4afd6134812267da04f
- SHA1 aca61250510456032a64eb32567445b185625027
- SHA512 b37aaec5794663db1fceec49f79d6a243729902afbafa1cc9fa3e9c3b03af4ecad3adbfa1e2735c4ff9291e995ebd97350c983f6b4a04ce247d132863870fe80
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIu8:Ona1hiiMh4ci4wLZ5bsqnu58
- TLSH T12AA49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_multi password recovery 1.1 x - 1.2 x+ any editions generic.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_multi password recovery 1.1 x - 1.2 x+ any editions generic.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_multi password recovery 1.1 x - 1.2 x+ any editions generic.exe
- Size 446KB
- SHA256 7c98aab198a07efd9c648505b47b18f09ddfdd48fd6cc1646f950e35ec1b1255
- MD5 d36790fc1337c4afd6134812267da04f
- SHA1 aca61250510456032a64eb32567445b185625027
- SHA512 b37aaec5794663db1fceec49f79d6a243729902afbafa1cc9fa3e9c3b03af4ecad3adbfa1e2735c4ff9291e995ebd97350c983f6b4a04ce247d132863870fe80
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIu8:Ona1hiiMh4ci4wLZ5bsqnu58
- TLSH T12AA49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.