General
- Target jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpx.855de7a27a2eb5a2df469687afd66b7b
- Size 41KB
- Sample261006-tpryesax2w
- SHA256 c545962f9ad8103c84ca8b1ee17686d5c2de345763a8c7364ada681c4f8b321e
- MD5 855de7a27a2eb5a2df469687afd66b7b
- SHA1 5de466ab6920870822380cc3ee568d1303c49d8a
- SHA512 6f568d9eb5f6dfe4c73f16fe087fece35789c66b1a234b6ecc4bb8bea16018dd7c9698d0b191b4baea212af4b6944398703c91188dd17be0bf7aa563c80146d9
- SSDEEP 768:QGBar1ZIZYnfI9opm6AIHIjaI7g9mVmUn4oNE/W5dRV8:fW1ZIZqI9opm6AIHIjzmUxNzd
- TLSH T1E3133B366F802AB7C9400C72025B6BB1E3F7EE7149729EE2876035392D7599A4B01FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpx.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpx.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Dorifel.awpx.855de7a27a2eb5a2df469687afd66b7b
- Size 41KB
- SHA256 c545962f9ad8103c84ca8b1ee17686d5c2de345763a8c7364ada681c4f8b321e
- MD5 855de7a27a2eb5a2df469687afd66b7b
- SHA1 5de466ab6920870822380cc3ee568d1303c49d8a
- SHA512 6f568d9eb5f6dfe4c73f16fe087fece35789c66b1a234b6ecc4bb8bea16018dd7c9698d0b191b4baea212af4b6944398703c91188dd17be0bf7aa563c80146d9
- SSDEEP 768:QGBar1ZIZYnfI9opm6AIHIjaI7g9mVmUn4oNE/W5dRV8:fW1ZIZqI9opm6AIHIjzmUxNzd
- TLSH T1E3133B366F802AB7C9400C72025B6BB1E3F7EE7149729EE2876035392D7599A4B01FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.