General
- Target jaffacakes118_c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f.bin
- Size 45KB
- Sample260925-2px4faycmd
- SHA256 c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f
- MD5 61921d9f1b87f664852ed2bd1486feb7
- SHA1 665e16a43dbe211575d27b373b6dbb9784ad8228
- SHA512 a95f185bb405c46526b3ba6c37bbffdd489060177d040898cfde82dd95ecbca0127ba091d5c6b218456a6ef1d491308133b7d7fa44e6f4b6f4e523b099561f5d
- SSDEEP 768:aI4CHAU7zb9y3OEiDM75ocBvKwJW22ffANiEIym/5Q:a6HX95EiDM75xBvPJL22rIyG
- TLSH T1F323BF8B7B880D53CBC6523A064ED97EDBF982352E347F13C78483086A357D6E87A119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f.bin
- Size 45KB
- SHA256 c2fe90944541227d60e7a486af7657620b93c35f9295b92a01cfc78be83bda5f
- MD5 61921d9f1b87f664852ed2bd1486feb7
- SHA1 665e16a43dbe211575d27b373b6dbb9784ad8228
- SHA512 a95f185bb405c46526b3ba6c37bbffdd489060177d040898cfde82dd95ecbca0127ba091d5c6b218456a6ef1d491308133b7d7fa44e6f4b6f4e523b099561f5d
- SSDEEP 768:aI4CHAU7zb9y3OEiDM75ocBvKwJW22ffANiEIym/5Q:a6HX95EiDM75xBvPJL22rIyG
- TLSH T1F323BF8B7B880D53CBC6523A064ED97EDBF982352E347F13C78483086A357D6E87A119
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.