General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.91f3f5606a7e0865d1a88e1e09e905c6
- Size 27KB
- Sample261006-spesesh14v
- SHA256 ca434737fcbf92f53d690809806ac123f7b5005ab919fa656ab7733672ec90e7
- MD5 91f3f5606a7e0865d1a88e1e09e905c6
- SHA1 624c0ae30386072276040326717eb489746885ea
- SHA512 1db2924d2e5300a3ad4cf4ea09c687ebfd69891cbbbf0b93813309dfe73c8f3bedfaf390f0e7ffa904114de5d671c3f72b0d29271f22ca791e154805a8d64b7f
- SSDEEP 192:NdrNngrlQXh3IV1i6ag8pDRTWPXLE0Pv05YCF8LsSJEWrdD:Nd5Yc43aHhWPXA030iCCLsYEWrt
- TLSH T1DFC2295B7F049A33C7D2823B268C997EE7BA427039666E43E754834E1C726E4E476309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.ayqa.91f3f5606a7e0865d1a88e1e09e905c6
- Size 27KB
- SHA256 ca434737fcbf92f53d690809806ac123f7b5005ab919fa656ab7733672ec90e7
- MD5 91f3f5606a7e0865d1a88e1e09e905c6
- SHA1 624c0ae30386072276040326717eb489746885ea
- SHA512 1db2924d2e5300a3ad4cf4ea09c687ebfd69891cbbbf0b93813309dfe73c8f3bedfaf390f0e7ffa904114de5d671c3f72b0d29271f22ca791e154805a8d64b7f
- SSDEEP 192:NdrNngrlQXh3IV1i6ag8pDRTWPXLE0Pv05YCF8LsSJEWrdD:Nd5Yc43aHhWPXA030iCCLsYEWrt
- TLSH T1DFC2295B7F049A33C7D2823B268C997EE7BA427039666E43E754834E1C726E4E476309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.