General
- Target jaffacakes118_Das kleine Kochlexikon 4.00.exe
- Size 4.6MB
- Sample260910-fbq73syakb
- SHA256 8c27a5e19d42c7c9e771a901fc7b3001adac7ec18eab6c6d5fbd7d2e83ecd896
- MD5 85f03134f46029d62a36a0ecc173a19a
- SHA1 639b3b69421d52f81e81248cf97a3aa7c895e29f
- SHA512 bee07069ea0847bd667f3b79838c84b33203c9081c656097cb0c41302b08cf7f1068ae68ff5cb1c0505edb55e92edc8d37587259d88f9535a0398d19ec9a6c39
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T12526238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Das kleine Kochlexikon 4.00.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Das kleine Kochlexikon 4.00.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Das kleine Kochlexikon 4.00.exe
- Size 4.6MB
- SHA256 8c27a5e19d42c7c9e771a901fc7b3001adac7ec18eab6c6d5fbd7d2e83ecd896
- MD5 85f03134f46029d62a36a0ecc173a19a
- SHA1 639b3b69421d52f81e81248cf97a3aa7c895e29f
- SHA512 bee07069ea0847bd667f3b79838c84b33203c9081c656097cb0c41302b08cf7f1068ae68ff5cb1c0505edb55e92edc8d37587259d88f9535a0398d19ec9a6c39
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T12526238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext