General
- Target jaffacakes118_346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e.bin
- Size 120KB
- Sample260924-2lwffatele
- SHA256 346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e
- MD5 2384d770b8645b86af878fdc959a91c8
- SHA1 6642553c1de3baa29f940a5f7482d38b8ba3457f
- SHA512 ff4aed8cf190e92b1414e9de557331f1c7706934cffdfc060b56e5a40887ef217bbbc882502363fd9dfd4cf0e123e94baa186e6da38883afb7ebc759288cffd0
- SSDEEP 3072:1gPU353+MamS1PQU7vvVbvCEKC5tTBf996n7y:1gPES1PrbvVbaEX5tTBV96n7y
- TLSH T15AC37C0579C9CBF2CA60843989DE3F79C7F2F4384AA50963630DC92E6D35856D3632E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e.bin
- Size 120KB
- SHA256 346d17d09022bcd400de5e6a3839c9b8ec111a1f10f011279ba3871533e4879e
- MD5 2384d770b8645b86af878fdc959a91c8
- SHA1 6642553c1de3baa29f940a5f7482d38b8ba3457f
- SHA512 ff4aed8cf190e92b1414e9de557331f1c7706934cffdfc060b56e5a40887ef217bbbc882502363fd9dfd4cf0e123e94baa186e6da38883afb7ebc759288cffd0
- SSDEEP 3072:1gPU353+MamS1PQU7vvVbvCEKC5tTBf996n7y:1gPES1PrbvVbaEX5tTBV96n7y
- TLSH T15AC37C0579C9CBF2CA60843989DE3F79C7F2F4384AA50963630DC92E6D35856D3632E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory