General
- Target jaffacakes118_The Cleaner 2012 8.0.0.1059 Multilanguage inkl.German - Zoo.exe
- Size 375KB
- Sample260910-el419ayzas
- SHA256 6063e450effc23aad9a109a4f575290775e2dafe786637742b8b256b1ef7fe55
- MD5 a3a3f9c9b4ab26139ca4034a8180111c
- SHA1 d83e414f8e0723ac3addc211106e29d1d614a96a
- SHA512 289cee0cb72e65f380ee7e5e4cb3e8436977275bc88357b9c475ea9dbe1ffd53a91cafc3384b416585e8efd9278dca598cbaac9ad44bf1dc777365ba0e3bc025
- SSDEEP 6144:XYtzu4ueaidpc6J53tCh6W+oBrUwfmM2SpHSOHNhBsR/A:XYtzuMVFzCuoB3lSOHfCI
- TLSH T1848423218A1CC844FAB94631294314716A377C2E94BEFBDA3BC2F273A673B40CD556D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_The Cleaner 2012 8.0.0.1059 Multilanguage inkl.German - Zoo.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_The Cleaner 2012 8.0.0.1059 Multilanguage inkl.German - Zoo.exe
- Size 375KB
- SHA256 6063e450effc23aad9a109a4f575290775e2dafe786637742b8b256b1ef7fe55
- MD5 a3a3f9c9b4ab26139ca4034a8180111c
- SHA1 d83e414f8e0723ac3addc211106e29d1d614a96a
- SHA512 289cee0cb72e65f380ee7e5e4cb3e8436977275bc88357b9c475ea9dbe1ffd53a91cafc3384b416585e8efd9278dca598cbaac9ad44bf1dc777365ba0e3bc025
- SSDEEP 6144:XYtzu4ueaidpc6J53tCh6W+oBrUwfmM2SpHSOHNhBsR/A:XYtzuMVFzCuoB3lSOHfCI
- TLSH T1848423218A1CC844FAB94631294314716A377C2E94BEFBDA3BC2F273A673B40CD556D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE