General
- Target jaffacakes118__af89f2c3715b164013101b6806eceb77
- Size 404KB
- Sample260919-ys84bswcle
- SHA256 f9b4821e3f035a162699ec1191bb8b0c236fa7f4c9187d5bc320f9262f802714
- MD5 af89f2c3715b164013101b6806eceb77
- SHA1 23288d47ff25878471400f06cd8201656cdc8121
- SHA512 28aa580f5bb25861be1fc424fdcc941b5707fcad3c9f95ef08b3482050c9ecf5a87dfc464fe8f222642f7cc280274447bec57008a0826ca28db18e25792f5f34
- SSDEEP 12288:9NutTwjzZ4HVDYx6+Jb/wmc7QEyIl3YijAr:StTuzyVSDwtyIyijAr
- TLSH T124941248F7894DE2EAA8523498FFDDBB22232536014F55A7B78DBA36532104245F13EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__af89f2c3715b164013101b6806eceb77.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__af89f2c3715b164013101b6806eceb77.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__af89f2c3715b164013101b6806eceb77
- Size 404KB
- SHA256 f9b4821e3f035a162699ec1191bb8b0c236fa7f4c9187d5bc320f9262f802714
- MD5 af89f2c3715b164013101b6806eceb77
- SHA1 23288d47ff25878471400f06cd8201656cdc8121
- SHA512 28aa580f5bb25861be1fc424fdcc941b5707fcad3c9f95ef08b3482050c9ecf5a87dfc464fe8f222642f7cc280274447bec57008a0826ca28db18e25792f5f34
- SSDEEP 12288:9NutTwjzZ4HVDYx6+Jb/wmc7QEyIl3YijAr:StTuzyVSDwtyIyijAr
- TLSH T124941248F7894DE2EAA8523498FFDDBB22232536014F55A7B78DBA36532104245F13EF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.