General
- Target jaffacakes118_Trojan-Dropper.Win32.Clons.mvy.b7ff12e6076db081bbe2b196c21f5e5a
- Size 887KB
- Sample261009-v98mcadb66
- SHA256 531eb7a2eb0ac5d8a780667dffb88722741ce176f7a79d6a894d95d36a40eac5
- MD5 b7ff12e6076db081bbe2b196c21f5e5a
- SHA1 9fafe147ed41941de95864ce8042f860458e934a
- SHA512 e64891b76aee7676f4b9062f109181b733a9f794d3d99f06e5453a1704235e6ff0bbd4aa8802fa471a5cac1d2db113efc19686599e861bb87be6f0b9db86b118
- SSDEEP 12288:wctxpx6CRGdXldWJ6t/0jGLtPT7efQqTR2+Ynwo5f+Wpgp7XxhWfSLfe:w0jwec7s6tsj2riSxp9k7BER
- TLSH T1D5156D36F5C18837D1721E7CCD5BA7A86C2ABE106D28784B7BF80E4C4F3969139291D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Clons.mvy.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Clons.mvy.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Clons.mvy.b7ff12e6076db081bbe2b196c21f5e5a
- Size 887KB
- SHA256 531eb7a2eb0ac5d8a780667dffb88722741ce176f7a79d6a894d95d36a40eac5
- MD5 b7ff12e6076db081bbe2b196c21f5e5a
- SHA1 9fafe147ed41941de95864ce8042f860458e934a
- SHA512 e64891b76aee7676f4b9062f109181b733a9f794d3d99f06e5453a1704235e6ff0bbd4aa8802fa471a5cac1d2db113efc19686599e861bb87be6f0b9db86b118
- SSDEEP 12288:wctxpx6CRGdXldWJ6t/0jGLtPT7efQqTR2+Ynwo5f+Wpgp7XxhWfSLfe:w0jwec7s6tsj2riSxp9k7BER
- TLSH T1D5156D36F5C18837D1721E7CCD5BA7A86C2ABE106D28784B7BF80E4C4F3969139291D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory