General
- Target jaffacakes118_Trojan-Downloader.Win32.Small.act.cb7e13059244565119e58d41319c8ba1
- Size 9KB
- Sample261006-plcbcagv5y
- SHA256 230d5503e16ed4bfec303104ae5f9a4e1a6ef4f67753b91150ef68caaacc9d5e
- MD5 cb7e13059244565119e58d41319c8ba1
- SHA1 a962eafa796aaf39b07de89704ac15dbaf32fbf6
- SHA512 2311bae3c6cb90014d1eb4d2f8a1be74481288d36324c9f71fcf63f9c309834dc033ca4dbaa7d0602b8daf3cee74501de604ea18e4e00c5c63c6ffddeccaa8d9
- SSDEEP 192:jPMsSp3ioEGgmGHirDigHv/LFoR/ZFJ/RPciNXSJP3nlST7k:jksS1ioT+iisLi/ZFNrRuP3nt
- TLSH T1D8128DE7093F652BD48BE2785581E04768F83C74637961B9344F8372AC84E972728B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.act.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Downloader.Win32.Small.act.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Downloader.Win32.Small.act.cb7e13059244565119e58d41319c8ba1
- Size 9KB
- SHA256 230d5503e16ed4bfec303104ae5f9a4e1a6ef4f67753b91150ef68caaacc9d5e
- MD5 cb7e13059244565119e58d41319c8ba1
- SHA1 a962eafa796aaf39b07de89704ac15dbaf32fbf6
- SHA512 2311bae3c6cb90014d1eb4d2f8a1be74481288d36324c9f71fcf63f9c309834dc033ca4dbaa7d0602b8daf3cee74501de604ea18e4e00c5c63c6ffddeccaa8d9
- SSDEEP 192:jPMsSp3ioEGgmGHirDigHv/LFoR/ZFJ/RPciNXSJP3nlST7k:jksS1ioT+iisLi/ZFNrRuP3nt
- TLSH T1D8128DE7093F652BD48BE2785581E04768F83C74637961B9344F8372AC84E972728B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory