General
- Target jaffacakes118_e67a10b15cb6cc09b5d131758a57032a_JaffaCakes118
- Size 164KB
- Sample260915-t14flaxybs
- SHA256 e1e7fbd2a3161c4b8b4226f13a548afa0ee527e322883c57989b012e9964ca6d
- MD5 e67a10b15cb6cc09b5d131758a57032a
- SHA1 f1416b0760ee988a743ee18fb7c86abffac12f97
- SHA512 18e9f9c2ece547884aabf95e4a2d4200add84aeeeaf7e4c0acd122d1e2304f09b9826ae176808e6b3281f835dbe289549e7819e766e81403e544a37fbd9f7cc7
- SSDEEP 3072:qiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5hf:FiilhmIQODDHBJdmOHIFs
- TLSH T1ADF3DF4AA5615AC1EC55D43303C7C49A1EA3A8C3E29A3D932478847318F566D3BF2DFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e67a10b15cb6cc09b5d131758a57032a_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e67a10b15cb6cc09b5d131758a57032a_JaffaCakes118.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e67a10b15cb6cc09b5d131758a57032a_JaffaCakes118
- Size 164KB
- SHA256 e1e7fbd2a3161c4b8b4226f13a548afa0ee527e322883c57989b012e9964ca6d
- MD5 e67a10b15cb6cc09b5d131758a57032a
- SHA1 f1416b0760ee988a743ee18fb7c86abffac12f97
- SHA512 18e9f9c2ece547884aabf95e4a2d4200add84aeeeaf7e4c0acd122d1e2304f09b9826ae176808e6b3281f835dbe289549e7819e766e81403e544a37fbd9f7cc7
- SSDEEP 3072:qiSVipBoNdGhm5P+0he9xagDexm6UJdme3HgrLpbPJG5hf:FiilhmIQODDHBJdmOHIFs
- TLSH T1ADF3DF4AA5615AC1EC55D43303C7C49A1EA3A8C3E29A3D932478847318F566D3BF2DFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)