General
- Target jaffacakes118_2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43.bin
- Size 180KB
- Sample260924-mkf7ssbd53
- SHA256 2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43
- MD5 8ec3f583530afc3f7ef74e7c5dd33001
- SHA1 a615119f2ca09dcd8574e9cfd4fffd48a5d62620
- SHA512 f3b2ca596e7f7358b6c307ef00912d52830f90b2044c67a12e8f2aa198e064fe70af37efec0506af1a6b36365d0a8cdf3636c7e0c7e0c30b56978d8622d05461
- SSDEEP 3072:ZcCJvY836Nfpsp3z9l8eswt6onBzaVwapmysNPGwzV70qnDrN6:ZcCJAeXp3rrJ6azaVwapmewJlw
- TLSH T11A048D13F6D180B2D0648ABC5C5E9654963FBE302EB42457BBA90F8E9D792C18D6C3C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43.bin
- Size 180KB
- SHA256 2377124bb1b89cae7b8d0c7efa151b7dad882396a3ab71735510feb4129d3f43
- MD5 8ec3f583530afc3f7ef74e7c5dd33001
- SHA1 a615119f2ca09dcd8574e9cfd4fffd48a5d62620
- SHA512 f3b2ca596e7f7358b6c307ef00912d52830f90b2044c67a12e8f2aa198e064fe70af37efec0506af1a6b36365d0a8cdf3636c7e0c7e0c30b56978d8622d05461
- SSDEEP 3072:ZcCJvY836Nfpsp3z9l8eswt6onBzaVwapmysNPGwzV70qnDrN6:ZcCJAeXp3rrJ6azaVwapmewJlw
- TLSH T11A048D13F6D180B2D0648ABC5C5E9654963FBE302EB42457BBA90F8E9D792C18D6C3C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.