General
- Target jaffacakes118__28471240c33fe273d365406dcdf28fd4
- Size 72KB
- Sample260920-15ercseq8w
- SHA256 0e2b937416fa599fa52d30e74769018898a1aed016503ada9188e8aa3815fee6
- MD5 28471240c33fe273d365406dcdf28fd4
- SHA1 3df24d0aac452eb594e1a7640147b8cdf8675d55
- SHA512 bfb7568564d5d4c6cd4c1adeacc86008526afa86c92901dc69959833c9a912518b6715b7c9ff1e2a0b356bf65f53463b4e7a0e7ced51c35289cb462fd3c4f0a3
- SSDEEP 768:O8muieyvhqPSgiENiCY7qDpGjW7/U/jSXuHQilKPMPC4VqrMZWXArffTeffUW7Ey:OzhyS5CkqDUWb0jOYC4VqrMZWXAWAdyP
- TLSH T15973D97B7F8B5446E08C52BD3787CFD12617794CAF074192768C6FAE5E20D630A2A263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__28471240c33fe273d365406dcdf28fd4.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__28471240c33fe273d365406dcdf28fd4.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__28471240c33fe273d365406dcdf28fd4
- Size 72KB
- SHA256 0e2b937416fa599fa52d30e74769018898a1aed016503ada9188e8aa3815fee6
- MD5 28471240c33fe273d365406dcdf28fd4
- SHA1 3df24d0aac452eb594e1a7640147b8cdf8675d55
- SHA512 bfb7568564d5d4c6cd4c1adeacc86008526afa86c92901dc69959833c9a912518b6715b7c9ff1e2a0b356bf65f53463b4e7a0e7ced51c35289cb462fd3c4f0a3
- SSDEEP 768:O8muieyvhqPSgiENiCY7qDpGjW7/U/jSXuHQilKPMPC4VqrMZWXArffTeffUW7Ey:OzhyS5CkqDUWb0jOYC4VqrMZWXAWAdyP
- TLSH T15973D97B7F8B5446E08C52BD3787CFD12617794CAF074192768C6FAE5E20D630A2A263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2