General
- Target jaffacakes118_2D Planetoid Pack 1.0.exe
- Size 7.4MB
- Sample260910-e6x4fazxfy
- SHA256 599b5a1fbd355948e7794dfb8105e407f894e450f59ee28a25ee01b764472afb
- MD5 2a846c16ad5f782e2bec61c5b8013658
- SHA1 2e8179b9f4617fafcaa7dcae5aae378355f3f324
- SHA512 c7317f3802ee83e11aaafc355da4ce0c7c508b119d16bcbc6ef69441b40f209997f25ff7222167ab99c3a89649b33a0d4677bec2f9b661fc5a43e00230e7fcd2
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T1F976238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2D Planetoid Pack 1.0.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2D Planetoid Pack 1.0.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2D Planetoid Pack 1.0.exe
- Size 7.4MB
- SHA256 599b5a1fbd355948e7794dfb8105e407f894e450f59ee28a25ee01b764472afb
- MD5 2a846c16ad5f782e2bec61c5b8013658
- SHA1 2e8179b9f4617fafcaa7dcae5aae378355f3f324
- SHA512 c7317f3802ee83e11aaafc355da4ce0c7c508b119d16bcbc6ef69441b40f209997f25ff7222167ab99c3a89649b33a0d4677bec2f9b661fc5a43e00230e7fcd2
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T1F976238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext