General
- Target jaffacakes118_XoftSpySE 6 0 + Crack [www rapidtreggy com].exe
- Size 6.3MB
- Sample260910-etwpvazsfw
- SHA256 745ae89ad29a060d395abed9e9a412bf0e5619cd9ca4b9cb9fc3a650ae98aa96
- MD5 410e6f52bd70a5ff5215d1c46fb3298d
- SHA1 0f183b5fc2c9816e512ee735d7448efe1c2507f1
- SHA512 8d235e72422e32ba2a73e659676874fde1f2c7ee35c4af49e5a78df95ef9f9a5a1eeaee4b4f043313da8e0df920069e0ba70616a67fe2b2f3679ef52f745df3c
- SSDEEP 12288:VRWbxXtANrnepr+U/r9TgD65O1+dd3HHHSJMHHxXXmCvY1ETf7NIjK88ieR:Vkbx6begsrNgGmG+Qf7Y8ieR
- TLSH T15766129BB61C3F37CEEE487407809AD58918744F54F843155839EFFAAABC9370598B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_XoftSpySE 6 0 + Crack [www rapidtreggy com].exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_XoftSpySE 6 0 + Crack [www rapidtreggy com].exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_XoftSpySE 6 0 + Crack [www rapidtreggy com].exe
- Size 6.3MB
- SHA256 745ae89ad29a060d395abed9e9a412bf0e5619cd9ca4b9cb9fc3a650ae98aa96
- MD5 410e6f52bd70a5ff5215d1c46fb3298d
- SHA1 0f183b5fc2c9816e512ee735d7448efe1c2507f1
- SHA512 8d235e72422e32ba2a73e659676874fde1f2c7ee35c4af49e5a78df95ef9f9a5a1eeaee4b4f043313da8e0df920069e0ba70616a67fe2b2f3679ef52f745df3c
- SSDEEP 12288:VRWbxXtANrnepr+U/r9TgD65O1+dd3HHHSJMHHxXXmCvY1ETf7NIjK88ieR:Vkbx6begsrNgGmG+Qf7Y8ieR
- TLSH T15766129BB61C3F37CEEE487407809AD58918744F54F843155839EFFAAABC9370598B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Accesses Microsoft Outlook profiles