General
- Target jaffacakes118_004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5.bin
- Size 320KB
- Sample260924-khk2vs1fkd
- SHA256 004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5
- MD5 5a1335dd1b47b27981d6695c9fe3529f
- SHA1 daff5910da9906b3d3d267952cf0fadd48b87bee
- SHA512 54db5b04495df26526aad9b5805be3235c516bb28c2658ba13f4d4f387719cfab4772a0f675b1861e1d053d85dcc329d494180fd91b96cbfb54bcc8981adc18e
- SSDEEP 768:IlonTGnIL4UPwuvfd60Kk7BfonZYwn8oxrKeQfRL2I3H8UALy7QjXka0Rwkc5QUd:SoinIL4UHd6swnZYwn88ryp8UbGXuG
- TLSH T15964ADF647DB0540EDD6523BD46A15B5A1D9EE0E0014A24C7E23BD2E28B0CEB723A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5.bin
- Size 320KB
- SHA256 004b671c7b9d15227bd66a81587f0fb09b22489bc1491176450414b4217215b5
- MD5 5a1335dd1b47b27981d6695c9fe3529f
- SHA1 daff5910da9906b3d3d267952cf0fadd48b87bee
- SHA512 54db5b04495df26526aad9b5805be3235c516bb28c2658ba13f4d4f387719cfab4772a0f675b1861e1d053d85dcc329d494180fd91b96cbfb54bcc8981adc18e
- SSDEEP 768:IlonTGnIL4UPwuvfd60Kk7BfonZYwn8oxrKeQfRL2I3H8UALy7QjXka0Rwkc5QUd:SoinIL4UHd6swnZYwn88ryp8UbGXuG
- TLSH T15964ADF647DB0540EDD6523BD46A15B5A1D9EE0E0014A24C7E23BD2E28B0CEB723A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Checks for any installed AV software in registry
-
Drops file in System32 directory