General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.c5bc1e7d35d7d1f751d9c572c95d0f45
- Size 1.9MB
- Sample261006-ss2flazx8j
- SHA256 aa9bb1a1962c6e1edd1a0f2024b853409fe5fa83297ebd5b4ce4f2014d6a3ebd
- MD5 c5bc1e7d35d7d1f751d9c572c95d0f45
- SHA1 78c7fad6273854900f8c4bb88589e504deb945a0
- SHA512 e50e9e46d868495775a3f982b448c347b499731eba425703bd9703fd20edc593a2361acfd6df89061bb28f747b34635bf02c1f6a3129fa9dcf2369937d73448a
- SSDEEP 24576:HReuectp9dCDX0wtJ+VHo2qFSasuIcy7Kr67rWtFV0F5BHSZ0YPOKydJ:H7CT3aRgSaJI2KK47
- TLSH T1DF95AD42A393C0F6DA6105B2D36D4E231939BD2357F999EB66807C1FDB702C366712B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.c5bc1e7d35d7d1f751d9c572c95d0f45
- Size 1.9MB
- SHA256 aa9bb1a1962c6e1edd1a0f2024b853409fe5fa83297ebd5b4ce4f2014d6a3ebd
- MD5 c5bc1e7d35d7d1f751d9c572c95d0f45
- SHA1 78c7fad6273854900f8c4bb88589e504deb945a0
- SHA512 e50e9e46d868495775a3f982b448c347b499731eba425703bd9703fd20edc593a2361acfd6df89061bb28f747b34635bf02c1f6a3129fa9dcf2369937d73448a
- SSDEEP 24576:HReuectp9dCDX0wtJ+VHo2qFSasuIcy7Kr67rWtFV0F5BHSZ0YPOKydJ:H7CT3aRgSaJI2KK47
- TLSH T1DF95AD42A393C0F6DA6105B2D36D4E231939BD2357F999EB66807C1FDB702C366712B8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Visual Basic
1Scheduled Task/Job
1Scheduled Task
1