General
- Target jaffacakes118_e6f7120902a919793c4105ac0ce87fa1_JaffaCakes118
- Size 165KB
- Sample260915-vbddjsbp81
- SHA256 bf7374bae70c2bbe06e6f5fbee0cb2933d978abe021a782799ecc8c5815117d2
- MD5 e6f7120902a919793c4105ac0ce87fa1
- SHA1 1bc7fa8a1b579997678d4d5b1c268bf9c47fbf58
- SHA512 1a0c5e6532583015d89eca67050e2a0d89ff7bb2c152a197bafe9beb2f22773ddb3c5ba1ec46f81476469293d684a334ccf674a5ad36f9466c2acba9faf63595
- SSDEEP 3072:C4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:ZiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1F5F3D0028A5109D2EC14C13327DBE9966E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e6f7120902a919793c4105ac0ce87fa1_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e6f7120902a919793c4105ac0ce87fa1_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e6f7120902a919793c4105ac0ce87fa1_JaffaCakes118
- Size 165KB
- SHA256 bf7374bae70c2bbe06e6f5fbee0cb2933d978abe021a782799ecc8c5815117d2
- MD5 e6f7120902a919793c4105ac0ce87fa1
- SHA1 1bc7fa8a1b579997678d4d5b1c268bf9c47fbf58
- SHA512 1a0c5e6532583015d89eca67050e2a0d89ff7bb2c152a197bafe9beb2f22773ddb3c5ba1ec46f81476469293d684a334ccf674a5ad36f9466c2acba9faf63595
- SSDEEP 3072:C4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:ZiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1F5F3D0028A5109D2EC14C13327DBE9966E13548BC6AB7DA72478E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)