General
- Target jaffacakes118_6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702.bin
- Size 430KB
- Sample261002-fs7amazybw
- SHA256 6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702
- MD5 ee2ff1d635d3ea906596d0cbed3a91b7
- SHA1 ecceadf838eea2a1578dab9ed9f5873a642bf36c
- SHA512 33bc3d12795b98605e07625cfab619a8efa64bc9d7b591074a87e9cef01d6169b20fa3ea1e650a8500c75c949e8d769679c732e057003f272794c2a94b3df3b8
- SSDEEP 3072:rGGu99lfzqIbXWcPTpQpHNEkS12hAGZu3YJcuR1nQ8Wg:a/cu/GptEF6u3Qz
- TLSH T117942BF5E6D0DA0BF5A4753119B4FA1E0401FB38FB22EAAB5760364A5676BC04078F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702.bin
- Size 430KB
- SHA256 6cea252cf10c8fb949eac2043981376fd1cca305c9dae572dfecb6e657f51702
- MD5 ee2ff1d635d3ea906596d0cbed3a91b7
- SHA1 ecceadf838eea2a1578dab9ed9f5873a642bf36c
- SHA512 33bc3d12795b98605e07625cfab619a8efa64bc9d7b591074a87e9cef01d6169b20fa3ea1e650a8500c75c949e8d769679c732e057003f272794c2a94b3df3b8
- SSDEEP 3072:rGGu99lfzqIbXWcPTpQpHNEkS12hAGZu3YJcuR1nQ8Wg:a/cu/GptEF6u3Qz
- TLSH T117942BF5E6D0DA0BF5A4753119B4FA1E0401FB38FB22EAAB5760364A5676BC04078F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1