General
- Target jaffacakes118__9c6beecaacb7006f499377df4bb3b1d3
- Size 156KB
- Sample260919-s2b73agg57
- SHA256 44d907e7f98535b8b47d89399df44846d62c9345e86a9f13b76669f5d77de97b
- MD5 9c6beecaacb7006f499377df4bb3b1d3
- SHA1 18bb51bc2d9af5957378a04d79238d8045bb566e
- SHA512 c815b58c010c0128210ce64bc913f754e7a88fbce43987fbe57c56e6e463853f9efd0b4af07203e0c2fd5a484357e9597dd4546189ba9d20a5fc9e5aa310881c
- SSDEEP 3072:IxRneefUkuUx/loYl36iqlekwohWv6pcDordSU4oQZiEjK:uJ3Uk/dlb+wohQxDoNWk
- TLSH T128F3941676C0F63EC415CAF43D2A83909436ED3565E2A813F6C22F26B6F5EA7D221317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__9c6beecaacb7006f499377df4bb3b1d3.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__9c6beecaacb7006f499377df4bb3b1d3.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__9c6beecaacb7006f499377df4bb3b1d3
- Size 156KB
- SHA256 44d907e7f98535b8b47d89399df44846d62c9345e86a9f13b76669f5d77de97b
- MD5 9c6beecaacb7006f499377df4bb3b1d3
- SHA1 18bb51bc2d9af5957378a04d79238d8045bb566e
- SHA512 c815b58c010c0128210ce64bc913f754e7a88fbce43987fbe57c56e6e463853f9efd0b4af07203e0c2fd5a484357e9597dd4546189ba9d20a5fc9e5aa310881c
- SSDEEP 3072:IxRneefUkuUx/loYl36iqlekwohWv6pcDordSU4oQZiEjK:uJ3Uk/dlb+wohQxDoNWk
- TLSH T128F3941676C0F63EC415CAF43D2A83909436ED3565E2A813F6C22F26B6F5EA7D221317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2