General
- Target jaffacakes118__2d85517fe8e836a650ea14fa031527c2
- Size 2.3MB
- Sample260919-2f3mkacc43
- SHA256 8ed3b3fc33c27558b1e8f1786cf35f91a4cfbbb5749d12c770165f13012db5bb
- MD5 2d85517fe8e836a650ea14fa031527c2
- SHA1 e0746d606bf8fa6d742f813e012949346aca056a
- SHA512 b5ac0564e3ed24aee90eb7d963bafdc0e2fa9236cb3a2f3cb0bcc59e77ed8e5b1e1bb89a619b04c00a627f271bda6288840718827d2bd3055f2a3237c410250e
- SSDEEP 49152:vIv6CD3uUlKkwXA5R7mJ0N1KbozS+iyUZTwb+v8oai93PblttrJH9Hib:vIv6CivkwQ5R7miPiXPfai93DvVrib
- TLSH T1B0B5337023944C26D55409F429D8AF28CE27CD7F8A84879B0B85FBAEADF1E538E35057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__2d85517fe8e836a650ea14fa031527c2.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__2d85517fe8e836a650ea14fa031527c2.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__2d85517fe8e836a650ea14fa031527c2
- Size 2.3MB
- SHA256 8ed3b3fc33c27558b1e8f1786cf35f91a4cfbbb5749d12c770165f13012db5bb
- MD5 2d85517fe8e836a650ea14fa031527c2
- SHA1 e0746d606bf8fa6d742f813e012949346aca056a
- SHA512 b5ac0564e3ed24aee90eb7d963bafdc0e2fa9236cb3a2f3cb0bcc59e77ed8e5b1e1bb89a619b04c00a627f271bda6288840718827d2bd3055f2a3237c410250e
- SSDEEP 49152:vIv6CD3uUlKkwXA5R7mJ0N1KbozS+iyUZTwb+v8oai93PblttrJH9Hib:vIv6CivkwQ5R7miPiXPfai93DvVrib
- TLSH T1B0B5337023944C26D55409F429D8AF28CE27CD7F8A84879B0B85FBAEADF1E538E35057
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory