General
- Target jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118
- Size 165KB
- Sample260915-tyd3xszdpg
- SHA256 909a7baf2a54eeef953afd02628444bf53240e5ec812ba963fa0b289e8e43f94
- MD5 e652e39f2dc22013cc283cd15144a176
- SHA1 887b83fbf189dd210d81323e2f962e8019487c91
- SHA512 fb365421db82cab2f8d8848c645332bd7c5cf8d8a923a5ed18815506cb9cddf5b7aa5378b232a17ad4e3ec03002baf1aa378ed81383055342c31f2fbef6f6053
- SSDEEP 3072:w4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:viI/PlY37ZLF4Ca6WABqBOvs
- TLSH T178F3D0028A5109D2EC14C53327DBE5966E13588BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e652e39f2dc22013cc283cd15144a176_JaffaCakes118
- Size 165KB
- SHA256 909a7baf2a54eeef953afd02628444bf53240e5ec812ba963fa0b289e8e43f94
- MD5 e652e39f2dc22013cc283cd15144a176
- SHA1 887b83fbf189dd210d81323e2f962e8019487c91
- SHA512 fb365421db82cab2f8d8848c645332bd7c5cf8d8a923a5ed18815506cb9cddf5b7aa5378b232a17ad4e3ec03002baf1aa378ed81383055342c31f2fbef6f6053
- SSDEEP 3072:w4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:viI/PlY37ZLF4Ca6WABqBOvs
- TLSH T178F3D0028A5109D2EC14C53327DBE5966E13588BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)