General
- Target jaffacakes118_e7260aadfa660fd399990d23ba7bf222_JaffaCakes118
- Size 165KB
- Sample260915-vd8bps1cmf
- SHA256 c4cf29d4cea2225c7c596c0efc95f4177cae6e3c9786c75cb316900a3df0672f
- MD5 e7260aadfa660fd399990d23ba7bf222
- SHA1 d5aaa522a6e2eea96b07cf223efffa301a0b128c
- SHA512 840d52a20dec8c9478a54e82daca6836f9bb39107960cc16aac0b5d3e068caf4df0c5b9bee422e6033c2bd852c520d4263d98dfb17ea79069c9ebece73364eac
- SSDEEP 3072:Y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:HiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1ACF3D0028A5109D2EC14C53323D7E9966E13549BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_e7260aadfa660fd399990d23ba7bf222_JaffaCakes118.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_e7260aadfa660fd399990d23ba7bf222_JaffaCakes118.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_e7260aadfa660fd399990d23ba7bf222_JaffaCakes118
- Size 165KB
- SHA256 c4cf29d4cea2225c7c596c0efc95f4177cae6e3c9786c75cb316900a3df0672f
- MD5 e7260aadfa660fd399990d23ba7bf222
- SHA1 d5aaa522a6e2eea96b07cf223efffa301a0b128c
- SHA512 840d52a20dec8c9478a54e82daca6836f9bb39107960cc16aac0b5d3e068caf4df0c5b9bee422e6033c2bd852c520d4263d98dfb17ea79069c9ebece73364eac
- SSDEEP 3072:Y4HCWau/PlYeuL7ZLFh6Ca6cbL9l2hzB3fJCC6j8+Er6ez4:HiI/PlY37ZLF4Ca6WABqBOvs
- TLSH T1ACF3D0028A5109D2EC14C53323D7E9966E13549BC6AB7DA72878E47328B126D3BF4DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Firseria
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)