General
- Target jaffacakes118_Trojan-Downloader.Win32.Zlob.jl.b3792a7b15d7440e8d1373ebf48b60df
- Size 17KB
- Sample261006-r7ttmacv8p
- SHA256 7357c99633e9548e893bb8575bd55e02a4608ecc5bb5237c583944ba44389822
- MD5 b3792a7b15d7440e8d1373ebf48b60df
- SHA1 1c9d7ae3b401361fd7994c1817417afcbd239105
- SHA512 dd2fe7eb0efb92ca0c77ad599cc89f2c1f463fb9e6ab24637ac024556a2c8c814d7b86c0031d915bdcaa5c31fc31b318298add138a2ae3a754c9709c08273988
- SSDEEP 384:a0R1nqP3llGegx/VDaIIdke0+chiG0MVI0Ax+lwI7LnjZ/+:aEqa/zIP0liG0N0AAlhvnjZ/+
- TLSH T10582D00546D5E3BEF265D2F40EAEF1817316E549CA5F8230D3531F1210207BC5A9EB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.Zlob.jl.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Downloader.Win32.Zlob.jl.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Downloader.Win32.Zlob.jl.b3792a7b15d7440e8d1373ebf48b60df
- Size 17KB
- SHA256 7357c99633e9548e893bb8575bd55e02a4608ecc5bb5237c583944ba44389822
- MD5 b3792a7b15d7440e8d1373ebf48b60df
- SHA1 1c9d7ae3b401361fd7994c1817417afcbd239105
- SHA512 dd2fe7eb0efb92ca0c77ad599cc89f2c1f463fb9e6ab24637ac024556a2c8c814d7b86c0031d915bdcaa5c31fc31b318298add138a2ae3a754c9709c08273988
- SSDEEP 384:a0R1nqP3llGegx/VDaIIdke0+chiG0MVI0Ax+lwI7LnjZ/+:aEqa/zIP0liG0N0AAlhvnjZ/+
- TLSH T10582D00546D5E3BEF265D2F40EAEF1817316E549CA5F8230D3531F1210207BC5A9EB59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory