General
- Target jaffacakes118_Disney Planes (2013).exe
- Size 605KB
- Sample260910-ff18vagl81
- SHA256 4d0b4e48117bc3a46d260b4e7f386909d7a5a0d6a6c7ca64b68c5809be94fdc0
- MD5 fe8bcbe5c4182a7e36be4c4422ffca67
- SHA1 22124cdae6073f4954831c2eb606dd454d3c5f40
- SHA512 9c5adfe78d95a660893c83329042c27ddfe37c5b8d37c7ce95cd356b1c8f4b060229907d9e1a7b2d6f303c8bce1b5cf12af45dce240ea618fd8261db9c0451ee
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuH:Ona1hiiMh4ci4wLZ5bsqnu5H
- TLSH T1FED49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Disney Planes (2013).exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Disney Planes (2013).exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Disney Planes (2013).exe
- Size 605KB
- SHA256 4d0b4e48117bc3a46d260b4e7f386909d7a5a0d6a6c7ca64b68c5809be94fdc0
- MD5 fe8bcbe5c4182a7e36be4c4422ffca67
- SHA1 22124cdae6073f4954831c2eb606dd454d3c5f40
- SHA512 9c5adfe78d95a660893c83329042c27ddfe37c5b8d37c7ce95cd356b1c8f4b060229907d9e1a7b2d6f303c8bce1b5cf12af45dce240ea618fd8261db9c0451ee
- SSDEEP 6144:OEMwOaTJhiiMhXIci478AaJT5bcIqqDLuIuH:Ona1hiiMh4ci4wLZ5bsqnu5H
- TLSH T1FED49D37F2C18C73D3711B3C8C66E6D8561ABA2D2F3824377DE81F4C9A391526929297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.