General
- Target jaffacakes118_Trojan-Dropper.Win32.Dapato.pbny.a48578391480f1ea1d340b13b04a4707
- Size 1.4MB
- Sample261009-we4kksdb92
- SHA256 59b4c8c9d0b1cf4e726e876e0d063db8dee00c6cf807e02829f745aed1152214
- MD5 a48578391480f1ea1d340b13b04a4707
- SHA1 da659345d762ffd6cc3a7bb2225758adf05a0a62
- SHA512 acbb69a6dfabac43a5ff0ab3092b46d4adb806c8eca8d2aae86294c6e31fe1d76f73a6c825ebdf26f3837057e0b4c8ac3f9268593f3fa05eacba1173130b2885
- SSDEEP 24576:5j0ifBwc9ZI8oNBJPu2WA4DR62xVEQNzokrixn9jl8l:x0SwcL2BsA4DvVEPaMZl8l
- TLSH T1CE65231677D2E071C4A300B15AF8AF31597CBE3C4B7E94C7BB902A6D69B13C0A639653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Dapato.pbny.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Dapato.pbny.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Dapato.pbny.a48578391480f1ea1d340b13b04a4707
- Size 1.4MB
- SHA256 59b4c8c9d0b1cf4e726e876e0d063db8dee00c6cf807e02829f745aed1152214
- MD5 a48578391480f1ea1d340b13b04a4707
- SHA1 da659345d762ffd6cc3a7bb2225758adf05a0a62
- SHA512 acbb69a6dfabac43a5ff0ab3092b46d4adb806c8eca8d2aae86294c6e31fe1d76f73a6c825ebdf26f3837057e0b4c8ac3f9268593f3fa05eacba1173130b2885
- SSDEEP 24576:5j0ifBwc9ZI8oNBJPu2WA4DR62xVEQNzokrixn9jl8l:x0SwcL2BsA4DvVEPaMZl8l
- TLSH T1CE65231677D2E071C4A300B15AF8AF31597CBE3C4B7E94C7BB902A6D69B13C0A639653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE