General
- Target jaffacakes118__2d190436739198c37955554c0fa29fa3
- Size 712KB
- Sample260919-178gfsty5m
- SHA256 f52afc0772d548bf5f9300e8b2f017d290dd73a2eb0f0cf2627b6ffdb29cff9f
- MD5 2d190436739198c37955554c0fa29fa3
- SHA1 117297bf9b6f35210083a0e61f83f5f2d571d195
- SHA512 8702145ae86f0f4ff22020a620877a157eb815d9089fc5cf6300ae7c80a1e4fadceaf27ab95afe111d0a62ec78119c64da9ef20abef07337fc87d909d32e659a
- SSDEEP 12288:NTzO88VU09JhsyOlCE7CvEqU1R8TsoUR7v+kb9IWKF/cEFxTFE+efM0xRQGvX:5zOc0Jhf6C7vER8AosHpI9/cEFBFElfz
- TLSH T13BF433A6CFE01E6DCE2945B68DB66A6781C80C4EC47EF117AC64500D23FCACB14F5EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__2d190436739198c37955554c0fa29fa3.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__2d190436739198c37955554c0fa29fa3.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__2d190436739198c37955554c0fa29fa3
- Size 712KB
- SHA256 f52afc0772d548bf5f9300e8b2f017d290dd73a2eb0f0cf2627b6ffdb29cff9f
- MD5 2d190436739198c37955554c0fa29fa3
- SHA1 117297bf9b6f35210083a0e61f83f5f2d571d195
- SHA512 8702145ae86f0f4ff22020a620877a157eb815d9089fc5cf6300ae7c80a1e4fadceaf27ab95afe111d0a62ec78119c64da9ef20abef07337fc87d909d32e659a
- SSDEEP 12288:NTzO88VU09JhsyOlCE7CvEqU1R8TsoUR7v+kb9IWKF/cEFxTFE+efM0xRQGvX:5zOc0Jhf6C7vER8AosHpI9/cEFBFElfz
- TLSH T13BF433A6CFE01E6DCE2945B68DB66A6781C80C4EC47EF117AC64500D23FCACB14F5EA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext