General
- Target jaffacakes118_ESET_Smart_Security_3.0.669_X32.rar.exe
- Size 5.6MB
- Sample260910-ffa2naz1dy
- SHA256 4d28c70e3517386c774a413d34a0819df802e66645d93548549e982192540614
- MD5 e74b5128a7ff6d20696e664780a3d3b3
- SHA1 f1a794535df4cb2120a488045354eed595ab2c55
- SHA512 5be3ff1c9a1f3526a17e7ab608e41533001cf0003e255b8f2a275bf80072db661dad6811389fad45327138f3b5dff333350fdc663268e1f1011be40f973b4754
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T18056238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_ESET_Smart_Security_3.0.669_X32.rar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_ESET_Smart_Security_3.0.669_X32.rar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_ESET_Smart_Security_3.0.669_X32.rar.exe
- Size 5.6MB
- SHA256 4d28c70e3517386c774a413d34a0819df802e66645d93548549e982192540614
- MD5 e74b5128a7ff6d20696e664780a3d3b3
- SHA1 f1a794535df4cb2120a488045354eed595ab2c55
- SHA512 5be3ff1c9a1f3526a17e7ab608e41533001cf0003e255b8f2a275bf80072db661dad6811389fad45327138f3b5dff333350fdc663268e1f1011be40f973b4754
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T18056238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext