General
- Target jaffacakes118_2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191.bin
- Size 57KB
- Sample260930-lymfasvwct
- SHA256 2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191
- MD5 310179b2cee17150f96cae41f38c07ed
- SHA1 b1c48d7cfa74680712a62cc7d1660583d66dfcf0
- SHA512 3da3894e88699238c7ef52399778f8571b695be109487fa2296ff26406ccecc4f4fe745ca9f5962c091236eb4dcf2788e3ff77a660adfa38e279b6f1ce353109
- SSDEEP 768:kuwoyXDFOOFDw8BUiQX/5BDaWWaa+qh1RGOajd4+SLjb06v5:kdoyXDFpDw8B6BsaVqh1laib3v5
- TLSH T11E431943BAD540A0E47E593008BAB3764672FC354E29E6AB9750ED4D1C71B80BE3273E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191.bin
- Size 57KB
- SHA256 2dec082dbb7eb484f3b4f5ec8a179f15818b6fe84b90b4f460765e98a2fa2191
- MD5 310179b2cee17150f96cae41f38c07ed
- SHA1 b1c48d7cfa74680712a62cc7d1660583d66dfcf0
- SHA512 3da3894e88699238c7ef52399778f8571b695be109487fa2296ff26406ccecc4f4fe745ca9f5962c091236eb4dcf2788e3ff77a660adfa38e279b6f1ce353109
- SSDEEP 768:kuwoyXDFOOFDw8BUiQX/5BDaWWaa+qh1RGOajd4+SLjb06v5:kdoyXDFpDw8B6BsaVqh1laib3v5
- TLSH T11E431943BAD540A0E47E593008BAB3764672FC354E29E6AB9750ED4D1C71B80BE3273E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.