General
- Target jaffacakes118__27de2d004ff46dd915fad8916178882c
- Size 57KB
- Sample260920-1wed8stvbx
- SHA256 351f401038180629d5bfd68b1ee3f9833a434bd8a3563cfa66373251fb8038a9
- MD5 27de2d004ff46dd915fad8916178882c
- SHA1 88990a991d9b3738678e999e9debca6e2702e5d7
- SHA512 16c9ba42038c7dc868d539fb0cfd66f30037a706f5ac6d49111b3764315e7d56406da6a86e2060f1dea8cd8d4e6ff8a21b68645a2d21b595e5547bd76fd0254f
- SSDEEP 1536:1m5Wvd2ikMbL2ffryqUUUTCoGlcL/Sx8WFhpF:1mod2zMueqUU068WFbF
- TLSH T176430713EB591287D42E1F3510B90B19E725953D3F5E878B15ACFA3DEA903C22E263C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__27de2d004ff46dd915fad8916178882c.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__27de2d004ff46dd915fad8916178882c.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__27de2d004ff46dd915fad8916178882c
- Size 57KB
- SHA256 351f401038180629d5bfd68b1ee3f9833a434bd8a3563cfa66373251fb8038a9
- MD5 27de2d004ff46dd915fad8916178882c
- SHA1 88990a991d9b3738678e999e9debca6e2702e5d7
- SHA512 16c9ba42038c7dc868d539fb0cfd66f30037a706f5ac6d49111b3764315e7d56406da6a86e2060f1dea8cd8d4e6ff8a21b68645a2d21b595e5547bd76fd0254f
- SSDEEP 1536:1m5Wvd2ikMbL2ffryqUUUTCoGlcL/Sx8WFhpF:1mod2zMueqUU068WFbF
- TLSH T176430713EB591287D42E1F3510B90B19E725953D3F5E878B15ACFA3DEA903C22E263C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory