General
- Target jaffacakes118_Trojan-Ransom.Win32.Blocker.ftno.45b9cdec8121f4528bbbd1e976cc758e
- Size 105KB
- Sample261006-vjmbesstdv
- SHA256 899a961bf4e69a356881e9017000e8b43fe64a8840d8a4b233c906e3f7970869
- MD5 45b9cdec8121f4528bbbd1e976cc758e
- SHA1 472087040df34262e2bcbd2c459415d495e0dd32
- SHA512 17679b75eaf7b99b8687dad7d760560d9cac26bddbf2df4fe79472776760c1231eb0f1fdf3d3fd3ea74067e7413b7763f173214292593e7131057049aeeded61
- SSDEEP 1536:lU4yqi9FOluMjC0CWGo/S1DolDzEYPdrNMBUT/KqrWk8AGONyTqJv:hyqeF8uOd3t/S1DQHJNMG2uWk8AnNqav
- TLSH T1C6B30735F5808877D0371ABD8C938194A41577B42A3E294B75D90F0DEFBE2C26E2E15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Ransom.Win32.Blocker.ftno.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Ransom.Win32.Blocker.ftno.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Ransom.Win32.Blocker.ftno.45b9cdec8121f4528bbbd1e976cc758e
- Size 105KB
- SHA256 899a961bf4e69a356881e9017000e8b43fe64a8840d8a4b233c906e3f7970869
- MD5 45b9cdec8121f4528bbbd1e976cc758e
- SHA1 472087040df34262e2bcbd2c459415d495e0dd32
- SHA512 17679b75eaf7b99b8687dad7d760560d9cac26bddbf2df4fe79472776760c1231eb0f1fdf3d3fd3ea74067e7413b7763f173214292593e7131057049aeeded61
- SSDEEP 1536:lU4yqi9FOluMjC0CWGo/S1DolDzEYPdrNMBUT/KqrWk8AGONyTqJv:hyqeF8uOd3t/S1DQHJNMG2uWk8AnNqav
- TLSH T1C6B30735F5808877D0371ABD8C938194A41577B42A3E294B75D90F0DEFBE2C26E2E15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.