General
- Target jaffacakes118_DVD_Fab_Platinum .1.1.0Final(withMobileOption).exe
- Size 6.9MB
- Sample260910-flvy1s1tbx
- SHA256 d06da34c5be6715365d0d42496ca91707f069bc6a17a9207418153fe0ca6f65e
- MD5 c5d5474bc170e07e4efdd6306ac94f1d
- SHA1 c5a0c9f7921d8d2b928da74fef0db6cd849b8191
- SHA512 aedad7e28e1638d8955f355591bcc09a2aa91ffd1bb3cb55112d573eb4cbe22f731e72d17123c41431c2eaefe44ed995696dc42dc625096cafa4c17cf8ed9ada
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T13476238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_DVD_Fab_Platinum .1.1.0Final(withMobileOption).exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_DVD_Fab_Platinum .1.1.0Final(withMobileOption).exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_DVD_Fab_Platinum .1.1.0Final(withMobileOption).exe
- Size 6.9MB
- SHA256 d06da34c5be6715365d0d42496ca91707f069bc6a17a9207418153fe0ca6f65e
- MD5 c5d5474bc170e07e4efdd6306ac94f1d
- SHA1 c5a0c9f7921d8d2b928da74fef0db6cd849b8191
- SHA512 aedad7e28e1638d8955f355591bcc09a2aa91ffd1bb3cb55112d573eb4cbe22f731e72d17123c41431c2eaefe44ed995696dc42dc625096cafa4c17cf8ed9ada
- SSDEEP 12288:FUGSslu9IN5dLZmMHUJFugcCaBAwSkqOKRYHtAsaloP:FUGSslBD/mgU3uCKApkqFZTq
- TLSH T13476238DD1D18B00E2E1513ADEF6AFF92855DE38E6597C0F12CA7F9526723D2C624207
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks for VMWare drivers on disk
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Suspicious use of SetThreadContext