General
- Target jaffacakes118_HEUR.Trojan.Win32.StartPage.a19b2c732c92341da6ecdb5dfd3405ff
- Size 1.3MB
- Sample261009-vqhltada39
- SHA256 3bfd548b304eb1deb55d61460073b7f96a2f13bab123454da86405373a29d3e0
- MD5 a19b2c732c92341da6ecdb5dfd3405ff
- SHA1 94aa9d06debd576fade5b3d2216b8d591c0b7302
- SHA512 17087900ac96a6d3582bb8207db73f72c3c7adb907f59f4df6ed02bf9481e0e0e241eeb98c52a5a11f31a3862737a69812a63e96301a1826d8a469eb3a546ee5
- SSDEEP 12288:jiLJ5i7sJXx0douBjhCCAYi8c1i6oaeNSoeDlHsg+2Vasj0eqVl:OspfjxAf8c46oaKeD5l+25j0tVl
- TLSH T18655B53166D14061E2723A31DD24DDEE342A7DB00FD69D9F9294372907B45F2CE3AE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.StartPage.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.StartPage.a19b2c732c92341da6ecdb5dfd3405ff
- Size 1.3MB
- SHA256 3bfd548b304eb1deb55d61460073b7f96a2f13bab123454da86405373a29d3e0
- MD5 a19b2c732c92341da6ecdb5dfd3405ff
- SHA1 94aa9d06debd576fade5b3d2216b8d591c0b7302
- SHA512 17087900ac96a6d3582bb8207db73f72c3c7adb907f59f4df6ed02bf9481e0e0e241eeb98c52a5a11f31a3862737a69812a63e96301a1826d8a469eb3a546ee5
- SSDEEP 12288:jiLJ5i7sJXx0douBjhCCAYi8c1i6oaeNSoeDlHsg+2Vasj0eqVl:OspfjxAf8c46oaKeD5l+25j0tVl
- TLSH T18655B53166D14061E2723A31DD24DDEE342A7DB00FD69D9F9294372907B45F2CE3AE2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1