General
- Target jaffacakes118_e6d7eb6f2b977283577613201ce367bd_JaffaCakes118
- Size 163KB
- Sample260915-t8596aysc1
- SHA256 ee62d8df912de620f4958a743db4ce49cb65c30aa3e67932b5f7ab0931afd3ca
- MD5 e6d7eb6f2b977283577613201ce367bd
- SHA1 25732dcc0d71015dc88cb49c4d6fc987d4aeffa4
- SHA512 89036db7acebf3638dd4565f33f460c0bdcb0401fd0aec0a907e19b00140ac5c1a09ab1915b73cce0698b7e3c070cafa26ca61a4b5af6b9da6a94e1b851eac38
- SSDEEP 3072:c4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4n:ziI/PlY37ZLF4Ca6WABqBOvsn
- TLSH T1F9F3D0029A5109C2EC14C13327D7E58AAE13588BC5AB7DE76478A57328B166D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e6d7eb6f2b977283577613201ce367bd_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e6d7eb6f2b977283577613201ce367bd_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e6d7eb6f2b977283577613201ce367bd_JaffaCakes118
- Size 163KB
- SHA256 ee62d8df912de620f4958a743db4ce49cb65c30aa3e67932b5f7ab0931afd3ca
- MD5 e6d7eb6f2b977283577613201ce367bd
- SHA1 25732dcc0d71015dc88cb49c4d6fc987d4aeffa4
- SHA512 89036db7acebf3638dd4565f33f460c0bdcb0401fd0aec0a907e19b00140ac5c1a09ab1915b73cce0698b7e3c070cafa26ca61a4b5af6b9da6a94e1b851eac38
- SSDEEP 3072:c4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4n:ziI/PlY37ZLF4Ca6WABqBOvsn
- TLSH T1F9F3D0029A5109C2EC14C13327D7E58AAE13588BC5AB7DE76478A57328B166D3BF0DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Firseria
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Drops desktop.ini file(s)