General
- Target jaffacakes118_(LimeWireWin-4.18.8) [1_1] - _LimeWireWin-4.18.8.exe_ yEnc (1_32)
- Size 7.5MB
- Sample260910-ebyrgswfkg
- SHA256 8a653e235d769a4d96eb53336e56c527ff5b79da3733647e3f36db1287fc03ac
- MD5 ac0e9fbd0583e7ba124426ecbfe9d1c8
- SHA1 2a28a66fefcd9c8ca8b08e646ecadea79b2b6f49
- SHA512 c1243c92a9969c3bc81bc6726fa0c7a74596dcdfa7ba1c772cc7420f34bb20d9619bce2ee7706bad914c7662669e577cf3004fd0f59ea824290d95edcbca8531
- SSDEEP 196608:gwFRrh0g3UPK39aHz3KwGTE+qkJmMiGKrxUFxLM:xrhbwT3KtTpqIHiG3LM
- TLSH T1EB76331CFB4F007DD8C30138748E6EEED9746E98EF661266A7890ED45C71EC1E60876A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_(LimeWireWin-4.18.8) [1_1] - _LimeWireWin-4.18.8.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_(LimeWireWin-4.18.8) [1_1] - _LimeWireWin-4.18.8.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_(LimeWireWin-4.18.8) [1_1] - _LimeWireWin-4.18.8.exe_ yEnc (1_32)
- Size 7.5MB
- SHA256 8a653e235d769a4d96eb53336e56c527ff5b79da3733647e3f36db1287fc03ac
- MD5 ac0e9fbd0583e7ba124426ecbfe9d1c8
- SHA1 2a28a66fefcd9c8ca8b08e646ecadea79b2b6f49
- SHA512 c1243c92a9969c3bc81bc6726fa0c7a74596dcdfa7ba1c772cc7420f34bb20d9619bce2ee7706bad914c7662669e577cf3004fd0f59ea824290d95edcbca8531
- SSDEEP 196608:gwFRrh0g3UPK39aHz3KwGTE+qkJmMiGKrxUFxLM:xrhbwT3KtTpqIHiG3LM
- TLSH T1EB76331CFB4F007DD8C30138748E6EEED9746E98EF661266A7890ED45C71EC1E60876A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory