General
- Target jaffacakes118__6b763734a128e0304df0d580182849e9
- Size 148KB
- Sample260919-fxdh4sbf69
- SHA256 9b2cbb6fa27b47e65aed59c748d56002a671ffa0eda5cc415572468ae5544420
- MD5 6b763734a128e0304df0d580182849e9
- SHA1 14374d8382fb36662679f526f5df24375c1c52db
- SHA512 0fd3f27ae98ff57e2eee2a79002f280ebe938ae01b7413a3a16b3efa161f697bf1a6bb3f0a6015a4e59674d94ae02166a9721aa1d4792a211dc056c83d4e2049
- SSDEEP 3072:gdo+7gRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pgRZkhQJAOAZ4oQZiES9++:OoEbj/pvkqBBac+RAGq1bZHtrzOS77ka
- TLSH T1C9E3B22A7791F23AC815CAF43D1983E494BDAC3621E26C13F7C25B16B2F1D9B9620753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__6b763734a128e0304df0d580182849e9.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__6b763734a128e0304df0d580182849e9.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__6b763734a128e0304df0d580182849e9
- Size 148KB
- SHA256 9b2cbb6fa27b47e65aed59c748d56002a671ffa0eda5cc415572468ae5544420
- MD5 6b763734a128e0304df0d580182849e9
- SHA1 14374d8382fb36662679f526f5df24375c1c52db
- SHA512 0fd3f27ae98ff57e2eee2a79002f280ebe938ae01b7413a3a16b3efa161f697bf1a6bb3f0a6015a4e59674d94ae02166a9721aa1d4792a211dc056c83d4e2049
- SSDEEP 3072:gdo+7gRs59j/pvkqBBac+RAGq1bg7Yfgst6OzOS79pgRZkhQJAOAZ4oQZiES9++:OoEbj/pvkqBBac+RAGq1bZHtrzOS77ka
- TLSH T1C9E3B22A7791F23AC815CAF43D1983E494BDAC3621E26C13F7C25B16B2F1D9B9620753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2