General
- Target jaffacakes118_e67b3e36a9f3edbb2881b6a5da61720e_JaffaCakes118
- Size 165KB
- Sample260915-t16wqaxycy
- SHA256 ff7b10878ca530182f86fc431ecf71546892a20aab3d94f118c77a7a03f5c800
- MD5 e67b3e36a9f3edbb2881b6a5da61720e
- SHA1 58332be5646f8bc97b03a7d733332a6696ade7e7
- SHA512 522848a43b4fec54f9c8ab0d19efce20fa3e9a57705311f65c979c3c9e67da53487f7c8ae1133bc4af941d9448c92f5a908a562e4dc0c0f3da28d16e362d99b5
- SSDEEP 3072:v4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:wiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1A0F3D0028A5109D2EC14C53323D7E9966E13548BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e67b3e36a9f3edbb2881b6a5da61720e_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e67b3e36a9f3edbb2881b6a5da61720e_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e67b3e36a9f3edbb2881b6a5da61720e_JaffaCakes118
- Size 165KB
- SHA256 ff7b10878ca530182f86fc431ecf71546892a20aab3d94f118c77a7a03f5c800
- MD5 e67b3e36a9f3edbb2881b6a5da61720e
- SHA1 58332be5646f8bc97b03a7d733332a6696ade7e7
- SHA512 522848a43b4fec54f9c8ab0d19efce20fa3e9a57705311f65c979c3c9e67da53487f7c8ae1133bc4af941d9448c92f5a908a562e4dc0c0f3da28d16e362d99b5
- SSDEEP 3072:v4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:wiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1A0F3D0028A5109D2EC14C53323D7E9966E13548BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)