General
- Target jaffacakes118_e712448c0f3f13a56caff93ef14094f9_JaffaCakes118
- Size 165KB
- Sample260915-vc3d3agd97
- SHA256 a15002997a4a2702d764701b82bb8071271e26d1fa1c7679cab529564c6cbf00
- MD5 e712448c0f3f13a56caff93ef14094f9
- SHA1 de72fe7cb380e3a2db66400e3690fd91ef48aefe
- SHA512 8fbbdc9700a768874e80c31a4548f341110656faf4b45166ab52085337db115061ac4a80a6798edf3315b4941bbd5dc616b4123d9512be5db31af08f9fefa3d1
- SSDEEP 3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs
- TLSH T198F3DF028A5109D2EC14C13323D7E9966E13549BC6AB7DA72878E47328B166D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e712448c0f3f13a56caff93ef14094f9_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e712448c0f3f13a56caff93ef14094f9_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e712448c0f3f13a56caff93ef14094f9_JaffaCakes118
- Size 165KB
- SHA256 a15002997a4a2702d764701b82bb8071271e26d1fa1c7679cab529564c6cbf00
- MD5 e712448c0f3f13a56caff93ef14094f9
- SHA1 de72fe7cb380e3a2db66400e3690fd91ef48aefe
- SHA512 8fbbdc9700a768874e80c31a4548f341110656faf4b45166ab52085337db115061ac4a80a6798edf3315b4941bbd5dc616b4123d9512be5db31af08f9fefa3d1
- SSDEEP 3072:V4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:miI/PlY37ZLF4Ca6WABqBOvs
- TLSH T198F3DF028A5109D2EC14C13323D7E9966E13549BC6AB7DA72878E47328B166D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)