General
- Target jaffacakes118_d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a.bin
- Size 143KB
- Sample261002-gn92dszflc
- SHA256 d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a
- MD5 a9d061b3e5ad70aef6f4b3eff296cc88
- SHA1 a50173ebbe7635e69a7c49d14f64bc0fa0caaf9d
- SHA512 828e858c1bbf473a8b8df6b16d7d340d73faefb65042c0cda1b1ed9c9a94a3b9c1a14803aaefe746966ea4a4483d7d0c0924bebb9129811178940c3c51c4ea37
- SSDEEP 1536:ZFjNOndQ6AKX5t+Twq9HFO8CLCDk+opQhk+PcOlxqqWTJMsbDhXdlWxuK3RGkijV:ZZYnRnX5t+TwlCYmh2eK7wxuKBGBcgnn
- TLSH T1C4E35B52F585C0B2E0A51F7D4C6AD1D79B2AFF212D38460BB6DA2F5CDCB92C12D182D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a.bin
- Size 143KB
- SHA256 d222143d0a83d7fd9b2a28de0905b3781a87c0b2f809cd9d66df474e81903e7a
- MD5 a9d061b3e5ad70aef6f4b3eff296cc88
- SHA1 a50173ebbe7635e69a7c49d14f64bc0fa0caaf9d
- SHA512 828e858c1bbf473a8b8df6b16d7d340d73faefb65042c0cda1b1ed9c9a94a3b9c1a14803aaefe746966ea4a4483d7d0c0924bebb9129811178940c3c51c4ea37
- SSDEEP 1536:ZFjNOndQ6AKX5t+Twq9HFO8CLCDk+opQhk+PcOlxqqWTJMsbDhXdlWxuK3RGkijV:ZZYnRnX5t+TwlCYmh2eK7wxuKBGBcgnn
- TLSH T1C4E35B52F585C0B2E0A51F7D4C6AD1D79B2AFF212D38460BB6DA2F5CDCB92C12D182D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory