General
- Target jaffacakes118__2b9201f384c38d6fab710c68cc47ef71
- Size 252KB
- Sample260920-xpxepazycv
- SHA256 93a0d47e834694cf8c645daccb23232b44613f54bed985711d49529a61f7c9d6
- MD5 2b9201f384c38d6fab710c68cc47ef71
- SHA1 45611a56459f1199ed8745d0fd616addb5ccc5e6
- SHA512 02d120a78c346f6786fa983d8be30fdfd7202114c09813e688ceca0fae986268b499c3d0b962669a891c817d155872078b690e07a7f107099ba2d9336c724a5a
- SSDEEP 3072:QES80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31Y:QQR7Bzq8h11qhGBXDKvF
- TLSH T179440F25E620A03AF88AC4F6746DE35A600C2D791694EC17F7895B85B0F42E7F5F1A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118__2b9201f384c38d6fab710c68cc47ef71.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__2b9201f384c38d6fab710c68cc47ef71.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__2b9201f384c38d6fab710c68cc47ef71
- Size 252KB
- SHA256 93a0d47e834694cf8c645daccb23232b44613f54bed985711d49529a61f7c9d6
- MD5 2b9201f384c38d6fab710c68cc47ef71
- SHA1 45611a56459f1199ed8745d0fd616addb5ccc5e6
- SHA512 02d120a78c346f6786fa983d8be30fdfd7202114c09813e688ceca0fae986268b499c3d0b962669a891c817d155872078b690e07a7f107099ba2d9336c724a5a
- SSDEEP 3072:QES80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31Y:QQR7Bzq8h11qhGBXDKvF
- TLSH T179440F25E620A03AF88AC4F6746DE35A600C2D791694EC17F7895B85B0F42E7F5F1A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2