General
- Target jaffacakes118_Fresh_UI_8.11.rar.exe
- Size 4.4MB
- Sample260910-eb17lsyvey
- SHA256 d1eb98b541905aa3365ff6bdcf2e0f8fe57e493920709e40a5aeb28aca2c223a
- MD5 723403aac8f080ef33236beddcd193bb
- SHA1 ab88e86170891dda7dff904bbbbc05baceb595fc
- SHA512 81502c450102f55b0d09aa33de6d138362b5325607d66f7d37fc31c239c9e3fd041e099a7b22e6b2ebb222ea3ba6957b594a20acaab61a89880068f05ace8db4
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T16A26238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Fresh_UI_8.11.rar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Fresh_UI_8.11.rar.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Fresh_UI_8.11.rar.exe
- Size 4.4MB
- SHA256 d1eb98b541905aa3365ff6bdcf2e0f8fe57e493920709e40a5aeb28aca2c223a
- MD5 723403aac8f080ef33236beddcd193bb
- SHA1 ab88e86170891dda7dff904bbbbc05baceb595fc
- SHA512 81502c450102f55b0d09aa33de6d138362b5325607d66f7d37fc31c239c9e3fd041e099a7b22e6b2ebb222ea3ba6957b594a20acaab61a89880068f05ace8db4
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T16A26238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext