General
- Target jaffacakes118__a9858596624a72b87294c81a04f5e35b
- Size 575KB
- Sample260919-xc5wasaf79
- SHA256 34420e21d5801100fcc8513858aa6399510d4ec7afb7ea81193c5036a9201aa8
- MD5 a9858596624a72b87294c81a04f5e35b
- SHA1 cbf987452f2c851e3b8d8bd7f3f514aa4ed6316f
- SHA512 7b43b31438ea0487ceca1b8e4e4ba109a0a24754e46e8b69cb1cb15aa63ac1f4f9a1bf203a364231ff3bcc4a7e3adfd6be51aa37ccec227c94b2e7b0914ec40e
- SSDEEP 12288:qutrzh9xOXkk3uWFXi1h7oM/kgO+3j2QlgkbyLLUlKHe+fYCr8BOoW2T:qutr5OUk3uWFXi1pb8gP3ZlgkGfUlKFC
- TLSH T181C4F1A576D4CCFAE180427059F9FB1DA2F9A97079799206E3E2098EFB74FC4B504123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__a9858596624a72b87294c81a04f5e35b.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__a9858596624a72b87294c81a04f5e35b.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__a9858596624a72b87294c81a04f5e35b
- Size 575KB
- SHA256 34420e21d5801100fcc8513858aa6399510d4ec7afb7ea81193c5036a9201aa8
- MD5 a9858596624a72b87294c81a04f5e35b
- SHA1 cbf987452f2c851e3b8d8bd7f3f514aa4ed6316f
- SHA512 7b43b31438ea0487ceca1b8e4e4ba109a0a24754e46e8b69cb1cb15aa63ac1f4f9a1bf203a364231ff3bcc4a7e3adfd6be51aa37ccec227c94b2e7b0914ec40e
- SSDEEP 12288:qutrzh9xOXkk3uWFXi1h7oM/kgO+3j2QlgkbyLLUlKHe+fYCr8BOoW2T:qutr5OUk3uWFXi1pb8gP3ZlgkGfUlKFC
- TLSH T181C4F1A576D4CCFAE180427059F9FB1DA2F9A97079799206E3E2098EFB74FC4B504123
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext