General
- Target jaffacakes118_Trojan-Downloader.Win32.Upatre.hlkg.310eb904ed86b4684ba858e28db0caff
- Size 195KB
- Sample261006-refrascs3n
- SHA256 55f631396eeca9e1fed73edef966490113e7a1ff6746820a51363ef337f5fb6d
- MD5 310eb904ed86b4684ba858e28db0caff
- SHA1 b3e20ed3548537d4711fb4619c84d3df6a3c8a3f
- SHA512 367b0d9d70dd100616adae9227867f3c46c3b5e0410203ec6ebc2ecec118d3b512622bcf49f0a0b069d6b671248b9028b9777feff57971c22b6764220a73157b
- SSDEEP 3072:AlRopAle5N4Z8TRU4KQTpc5vL9+aeOlo88xQeat5xtFO85:AYph5N4Z89UFQTpc5vL9+aeOOHQ5TOy
- TLSH T1A3144A38AEE0D137C1B791BA84F157A7BE61B531331058CBA39507564E22BE3BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.Upatre.hlkg.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Downloader.Win32.Upatre.hlkg.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Downloader.Win32.Upatre.hlkg.310eb904ed86b4684ba858e28db0caff
- Size 195KB
- SHA256 55f631396eeca9e1fed73edef966490113e7a1ff6746820a51363ef337f5fb6d
- MD5 310eb904ed86b4684ba858e28db0caff
- SHA1 b3e20ed3548537d4711fb4619c84d3df6a3c8a3f
- SHA512 367b0d9d70dd100616adae9227867f3c46c3b5e0410203ec6ebc2ecec118d3b512622bcf49f0a0b069d6b671248b9028b9777feff57971c22b6764220a73157b
- SSDEEP 3072:AlRopAle5N4Z8TRU4KQTpc5vL9+aeOlo88xQeat5xtFO85:AYph5N4Z89UFQTpc5vL9+aeOOHQ5TOy
- TLSH T1A3144A38AEE0D137C1B791BA84F157A7BE61B531331058CBA39507564E22BE3BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.