General
- Target jaffacakes118_AIO_Deluxe_WebDesign_Graphics.rar.exe
- Size 5.7MB
- Sample260910-epfstsyzhv
- SHA256 2c022fdb05f369467b1c6129583586433a6534c6ad005935d455a343f648310d
- MD5 3c76a3a065f967ac001fab5f9fc7db5f
- SHA1 db3303ae24c6c11b0ec32f7042630f0a41f6125f
- SHA512 82aa7307afd17097b2704f61f12c0472cee712f699ba58c1a67eeb226748ca10f19c78c5ba6c0d8ca7115fe46f7b5b37f6712a4b86bf3ed27522feb3124875ce
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T19356238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_AIO_Deluxe_WebDesign_Graphics.rar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_AIO_Deluxe_WebDesign_Graphics.rar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_AIO_Deluxe_WebDesign_Graphics.rar.exe
- Size 5.7MB
- SHA256 2c022fdb05f369467b1c6129583586433a6534c6ad005935d455a343f648310d
- MD5 3c76a3a065f967ac001fab5f9fc7db5f
- SHA1 db3303ae24c6c11b0ec32f7042630f0a41f6125f
- SHA512 82aa7307afd17097b2704f61f12c0472cee712f699ba58c1a67eeb226748ca10f19c78c5ba6c0d8ca7115fe46f7b5b37f6712a4b86bf3ed27522feb3124875ce
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T19356238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext