General
- Target jaffacakes118_64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4.bin
- Size 88KB
- Sample261002-le54aseh33
- SHA256 64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4
- MD5 2593e594d339a736660e1902b29ae683
- SHA1 78a26c7af7f9a555b5e5ed824eb259e9e8e3ea84
- SHA512 6b38cf5e5c8e9ba1e217ea637aee154eacb2932ff44582cebac31405e7564bb90d891da7242ba911bf6d3182405a3048e92045a9ee9f4ce142d7d356626831af
- SSDEEP 1536:53SUBESoaTgfL6tuk7/hCGi1iXbU8ZHqlDUro6XJ/Y/GF:IJSo8gUzF
- TLSH T1E39328A526A610F2D9730A73BE6C77F2D22C423209398651C75A1C1D9FF3CB7C7619A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4.bin
- Size 88KB
- SHA256 64d8798158e0a2d2a117b11cb9aac25a5d2c9e5f6d0670977ba62f35354ddec4
- MD5 2593e594d339a736660e1902b29ae683
- SHA1 78a26c7af7f9a555b5e5ed824eb259e9e8e3ea84
- SHA512 6b38cf5e5c8e9ba1e217ea637aee154eacb2932ff44582cebac31405e7564bb90d891da7242ba911bf6d3182405a3048e92045a9ee9f4ce142d7d356626831af
- SSDEEP 1536:53SUBESoaTgfL6tuk7/hCGi1iXbU8ZHqlDUro6XJ/Y/GF:IJSo8gUzF
- TLSH T1E39328A526A610F2D9730A73BE6C77F2D22C423209398651C75A1C1D9FF3CB7C7619A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext