General
- Target jaffacakes118_07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5.bin
- Size 191KB
- Sample260924-mkveesbd65
- SHA256 07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5
- MD5 9a146428e12e143d344bc45454a16e71
- SHA1 b93362cedf7b68ce730aa97e947725d8d3dc67a8
- SHA512 c71e62cce260ed7d40d48bf9dc79983f9bf4d61c564bce612043fe1c56ea5b50236840d587011dea352053ffc2ec1a7730d89f95c8bf58ee0388bd1b43fb658d
- SSDEEP 3072:scCJvY8QI/sJVoypsXTZew6UZyJ0En6hSPZB+vs4YN7VNMRrpu/zD5TNi:scCJApI0SXdeAjgB+lx8BU
- TLSH T135147C13F6E1C472D01156FC1C18A665A93FB9316EA42867B7AC0F8E9A7D2C18C6C3C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5.bin
- Size 191KB
- SHA256 07a69424cdc43043396cca07929f4a71f174a9b647efc7c83a3cce63946d66d5
- MD5 9a146428e12e143d344bc45454a16e71
- SHA1 b93362cedf7b68ce730aa97e947725d8d3dc67a8
- SHA512 c71e62cce260ed7d40d48bf9dc79983f9bf4d61c564bce612043fe1c56ea5b50236840d587011dea352053ffc2ec1a7730d89f95c8bf58ee0388bd1b43fb658d
- SSDEEP 3072:scCJvY8QI/sJVoypsXTZew6UZyJ0En6hSPZB+vs4YN7VNMRrpu/zD5TNi:scCJApI0SXdeAjgB+lx8BU
- TLSH T135147C13F6E1C472D01156FC1C18A665A93FB9316EA42867B7AC0F8E9A7D2C18C6C3C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.