General
- Target jaffacakes118__6a9dd855ce575d055bd1c036846253d4
- Size 156KB
- Sample260919-fpwpqabe86
- SHA256 a2582af23581d5f6d5d5ef7d67b4a9e43c10f8aa99d27300a733a900b6e7e9a5
- MD5 6a9dd855ce575d055bd1c036846253d4
- SHA1 e8d57b3573fd2693356d1a5171bd258e2af3a462
- SHA512 fc93286b2b01912333005600e6f5bc2d5b09692f88c305ae736a177f7df045ad8989e0624c8f578411c316ba0b20e9a6f6aee38cb528121446825d2a71330018
- SSDEEP 3072:cxRn5efUkuUx/loYl36iqlekwohWv6pcDordSD1E5j4oQd:SJiUk/dlb+wohQxDopdi
- TLSH T125F3942676C0F63DC415C6F83D2A8790A436ED3525E29813F6C22F26B6F5EA7D221317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__6a9dd855ce575d055bd1c036846253d4.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__6a9dd855ce575d055bd1c036846253d4.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__6a9dd855ce575d055bd1c036846253d4
- Size 156KB
- SHA256 a2582af23581d5f6d5d5ef7d67b4a9e43c10f8aa99d27300a733a900b6e7e9a5
- MD5 6a9dd855ce575d055bd1c036846253d4
- SHA1 e8d57b3573fd2693356d1a5171bd258e2af3a462
- SHA512 fc93286b2b01912333005600e6f5bc2d5b09692f88c305ae736a177f7df045ad8989e0624c8f578411c316ba0b20e9a6f6aee38cb528121446825d2a71330018
- SSDEEP 3072:cxRn5efUkuUx/loYl36iqlekwohWv6pcDordSD1E5j4oQd:SJiUk/dlb+wohQxDopdi
- TLSH T125F3942676C0F63DC415C6F83D2A8790A436ED3525E29813F6C22F26B6F5EA7D221317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2