General
- Target jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118
- Size 163KB
- Sample260915-t2g9rabl2w
- SHA256 01723f6fa62d4836210884b1c52d4e673d944497c13763f100a1cce87f2f86c2
- MD5 e67fe4c74a2e7e5d2f8bad62e573c4c1
- SHA1 ce33422abe9e6cdb6d3e2b8431071ae911627712
- SHA512 6dc995605ac83f55deb9a3ce065bb12846ab338d2369ac18c996a4c86a340f133eabcaa83ec7f63c9cd40a4b32d1558528fe3f844567b50687aabd161b7afb34
- SSDEEP 3072:+4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4P:NiI/PlY37ZLF4Ca6WABqBOvsP
- TLSH T135F3E0028A5109D2EC14C13327D7E58AAE13588BC6AB7DE72478A57328B156D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e67fe4c74a2e7e5d2f8bad62e573c4c1_JaffaCakes118
- Size 163KB
- SHA256 01723f6fa62d4836210884b1c52d4e673d944497c13763f100a1cce87f2f86c2
- MD5 e67fe4c74a2e7e5d2f8bad62e573c4c1
- SHA1 ce33422abe9e6cdb6d3e2b8431071ae911627712
- SHA512 6dc995605ac83f55deb9a3ce065bb12846ab338d2369ac18c996a4c86a340f133eabcaa83ec7f63c9cd40a4b32d1558528fe3f844567b50687aabd161b7afb34
- SSDEEP 3072:+4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4P:NiI/PlY37ZLF4Ca6WABqBOvsP
- TLSH T135F3E0028A5109D2EC14C13327D7E58AAE13588BC6AB7DE72478A57328B156D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)