General
- Target jaffacakes118_Trojan-GameThief.Win32.Magania.colr.af670cda581d8ecc3ab12ba5116ffa80
- Size 32KB
- Sample261006-txrbvs1zd1
- SHA256 d934c02405c0aecca65dcfa527e4d724b5122e31d9b98f8cce67f6fdcf5e1ba8
- MD5 af670cda581d8ecc3ab12ba5116ffa80
- SHA1 e31d226b4012b463d3d2870da25c2b16e3489ef0
- SHA512 3a9cf5fa3947a13f7b258096f13a1544c3421660e857391423629630c93e5775bba0a063b0c9cc3e8c9007f86ccc852948f02bab3d3175018a6e7869c1eae4c3
- SSDEEP 384:UReWxF8a8OCRyFi9+0gxweHiOKp39fxP258HpN8LypAcxsZJX16gt8ymO5ufu8Dx:CeWxE+FNuuIptJPQLSGJlt8Tu8Dulx
- TLSH T1B7E2E1CEF315EF06C8931BB96F07AEAD1A77B430524867851D0C25F37E621803E5A695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-GameThief.Win32.Magania.colr.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-GameThief.Win32.Magania.colr.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-GameThief.Win32.Magania.colr.af670cda581d8ecc3ab12ba5116ffa80
- Size 32KB
- SHA256 d934c02405c0aecca65dcfa527e4d724b5122e31d9b98f8cce67f6fdcf5e1ba8
- MD5 af670cda581d8ecc3ab12ba5116ffa80
- SHA1 e31d226b4012b463d3d2870da25c2b16e3489ef0
- SHA512 3a9cf5fa3947a13f7b258096f13a1544c3421660e857391423629630c93e5775bba0a063b0c9cc3e8c9007f86ccc852948f02bab3d3175018a6e7869c1eae4c3
- SSDEEP 384:UReWxF8a8OCRyFi9+0gxweHiOKp39fxP258HpN8LypAcxsZJX16gt8ymO5ufu8Dx:CeWxE+FNuuIptJPQLSGJlt8Tu8Dulx
- TLSH T1B7E2E1CEF315EF06C8931BB96F07AEAD1A77B430524867851D0C25F37E621803E5A695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.