General
- Target jaffacakes118__94138cc6e2afee9644701f7b2597c567
- Size 252KB
- Sample260919-p22aeafe68
- SHA256 2f72894b6e0b34e3f244ddc3c6bf798e115aa2929c5cf154c66c524235522ef7
- MD5 94138cc6e2afee9644701f7b2597c567
- SHA1 99ec1eb0db1e77cce2d373e1c417833e0d17062c
- SHA512 c72a0aca591a3d8c1fe55285e647160b47971ef14a8c46a61f63455408ec846552c2c9347998e663a4a52c9d78dc9e0e104015bd1bc2a96920f630f73f37dcf9
- SSDEEP 6144:473M85KEBHcv409Q6jH7MgQ6BfTClw0ItOdYjD8RUtj/BZdGNBfKkz4gUtS5Ro1F:4A85mVQ6BTCmj5ZdGNBfKkzbUtS5Roj
- TLSH T1AA444E26F621B01BF547C4F43829826B681D2D761298BC5BF785AF5A60B01E7B4F072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__94138cc6e2afee9644701f7b2597c567.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__94138cc6e2afee9644701f7b2597c567.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__94138cc6e2afee9644701f7b2597c567
- Size 252KB
- SHA256 2f72894b6e0b34e3f244ddc3c6bf798e115aa2929c5cf154c66c524235522ef7
- MD5 94138cc6e2afee9644701f7b2597c567
- SHA1 99ec1eb0db1e77cce2d373e1c417833e0d17062c
- SHA512 c72a0aca591a3d8c1fe55285e647160b47971ef14a8c46a61f63455408ec846552c2c9347998e663a4a52c9d78dc9e0e104015bd1bc2a96920f630f73f37dcf9
- SSDEEP 6144:473M85KEBHcv409Q6jH7MgQ6BfTClw0ItOdYjD8RUtj/BZdGNBfKkz4gUtS5Ro1F:4A85mVQ6BTCmj5ZdGNBfKkzbUtS5Roj
- TLSH T1AA444E26F621B01BF547C4F43829826B681D2D761298BC5BF785AF5A60B01E7B4F072F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2