Overview
overview
7Static
static
1Driver Pri...ti.lnk
windows10-2004-x64
7Driver Pri...ti.lnk
windows11-ltsc_2024-x64
5sef468we54...yo.vbs
windows10-2004-x64
5sef468we54...yo.vbs
windows11-ltsc_2024-x64
5sef468we54...pt.vbs
windows10-2004-x64
5sef468we54...pt.vbs
windows11-ltsc_2024-x64
5sef468we54...ww.vbs
windows10-2004-x64
5sef468we54...ww.vbs
windows11-ltsc_2024-x64
5sef468we54...ww.vbs
windows10-2004-x64
5sef468we54...ww.vbs
windows11-ltsc_2024-x64
5General
- Target jaffacakes118_Archive.zip
- Size 22KB
- Sample260912-qedfhacc95
- SHA256 4392926b8d3df6a58341177b2007308317202c9174a2c10d8d7e6c5d0a9d080f
- MD5 d6c2f34043e245c901b0010c714694db
- SHA1 6cc9e850e2ebbff5050d85c1b9c01fb696472fe1
- SHA512 75a01ff3229a5feae24940e092564eb30ff87d15c7d6290a517a3502123fe5a1e4c20274c863bf32d572b323dcf786b57fc4ec480bf60466d339c1eab68cb530
- SSDEEP 384:ptifs62k47JwGkrDA7lwQilncG/DMTctfUpL5jns4QCft0mi+HlybQZPdCrTaoyx:pz6j4e/ApklrtfUQZc
- TLSH T1D1A296A954175836C49DAE7AE89FCC12AC36288E0E8E7F5E66AF80530135DCDDF3118D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Driver Printer Hararti.lnk
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Driver Printer Hararti.lnk
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
sef468we54rer/JJKGfVbEqaPwyo.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
sef468we54rer/JJKGfVbEqaPwyo.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
sef468we54rer/combined_script.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
sef468we54rer/combined_script.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
sef468we54rer/ww1ww.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
sef468we54rer/ww1ww.vbs
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
sef468we54rer/wwww.vbs
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
sef468we54rer/wwww.vbs
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target Driver Printer Hararti.lnk
- Size 1KB
- SHA256 57874f6d1deeec0544b38b4434f88987196ff59c81971c71fbd0800921199b64
- MD5 077e89253d1c26e49a63ffb8d5868480
- SHA1 1591c47189ece8a838ce91787c054eaeacdb3df9
- SHA512 45fcf3411d6b2545e9c2ce1c975856c55a7ba135369cb4204a845e140571d7aaf49e1db1fb53701f7c88f58091e99f541aaab9380bc603b9f923ba454fa498a7
- TLSH T12431260C8BCD0212F6F38E76A0B6B301C6647895DE52DEAD0181A18C24B1951F976F3F
- MD5 SHA1 SHA512 TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.
-
- Target sef468we54rer/JJKGfVbEqaPwyo.txt
- Size 180B
- SHA256 bb38065cde95e368fe04a07f0588b59b2ba9b7be1b1461b8ad3b62e2d803e36c
- MD5 e4b1035f73eb70a9ce9a6cbfa3629664
- SHA1 be57d05adde870df3fb8d8fd10c13db91e0025cc
- SHA512 b1c2dc14ebe7d31e22b0f0346b1582ccedcf73b2fbcc93b28d6f5cd267ced7962e37722dfb87665a622b3ed87170fd1aaf3d5d708e3adcd500145dc72488dd47
- TLSH T1A2C080606157C575C06101D384F5CDCFD93115061D0BD521ADDCC5910A5D97557A5287
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sef468we54rer/combined_script.vbs
- Size 6KB
- SHA256 09fda48110ee1b65b4e9eb4df111c2b3a77b82904e6896840ea1cf610de5e65a
- MD5 6bbb081465a2210886a0cab5c29f4a58
- SHA1 43da4346ddc53858614b7b88099a5fbcba5c5af1
- SHA512 620bedbcc81ed0d4b573afa6255a6478b58e737e29b4e4347f7f8767febf9c5d4e7b0ed8b7ba3da248f9b5d9167b0e9aaeef6c96dee249657dd3e03613d4e60a
- SSDEEP 192:2ubqM14NtEIYLkWULGTCb79SwVqZs4IgI:9bqM14OUiGbxVQw
- TLSH T193D14BE4A437813DE91A13E45ABCF42530D7880E6C231DC2AF31F4A92198E9669E84ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sef468we54rer/ww1ww.txt
- Size 162B
- SHA256 2523a6505e4c91268b92f1211d990201441c1d6551be40e746073c94d2dabb2f
- MD5 314eaba9a34e9c40587eb67e86180b30
- SHA1 1f2ad2c2a05d7c331f470f08f5564a9c015a00a1
- SHA512 05923222657242c3306ddb7438ca75668c449405027b79a0ca243d0b88c90d597b6319e6d532445f2a6214e1a5becefd65aaa395128a47319c388621be738d34
- TLSH T17FC08065C57195BF9BA743D38563ADC501118513185C4F4E991208725466D4877D1DD0
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.
-
- Target sef468we54rer/wwww.vbs
- Size 115B
- SHA256 5b6f731493d8e8d533570aafe64d35115d43de26ffe83f94ab40adff10de7d92
- MD5 2b45eb5825d3092ee4729ccfa4372a80
- SHA1 f2f40067c2d7ca3bc5e66c7610021e4beda3b6f7
- SHA512 c4c131d664adfcb80b9bb19386696531ad80026c2af4ac968dee8d0679b3ec8122f6edf3cdaf29a4c2ba911dbb72570b8d16f2878140fcfa4f97964e995e3c4b
- TLSH T1D9B092612652C1A2A2120A82C85BD99FA0A264460E08EA1A1EE0D8CA006A5B80A26991
- MD5 SHA1 SHA512 TLSH
Score5/10-
Executes a VBScript file via the Windows Script Host.