General
- Target jaffacakes118_Trojan-Dropper.Win32.Dapato.pckk.b734c30ac54873b2cdb84fb936ccf668
- Size 1.8MB
- Sample261009-we93cssy8r
- SHA256 b01464ffd5e80dcc8100c06cab63a16bb85698cdf63588f1d6d39c70ef77018d
- MD5 b734c30ac54873b2cdb84fb936ccf668
- SHA1 18a2ca19e00274c4fc40b60f10c976c0094b675a
- SHA512 81813558272df8e5c3f2077e31d5ff0e0873b67bd39853ac66cd0c25ba058b2c9519066fc53b0bcc19d0b213666aa91f1d5b280e47a5d21e64393a503c91b58a
- SSDEEP 49152:RzbZDEJIsIxTgACSqPRIXdqGvTop/QhVvw4j:Rz2dIx6SldOQ
- TLSH T13B959E02A7C080B2E64E17751167E7BA5E399D354328C5CBD7A03D759E312D3AA3B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Dapato.pckk.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Dapato.pckk.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Dapato.pckk.b734c30ac54873b2cdb84fb936ccf668
- Size 1.8MB
- SHA256 b01464ffd5e80dcc8100c06cab63a16bb85698cdf63588f1d6d39c70ef77018d
- MD5 b734c30ac54873b2cdb84fb936ccf668
- SHA1 18a2ca19e00274c4fc40b60f10c976c0094b675a
- SHA512 81813558272df8e5c3f2077e31d5ff0e0873b67bd39853ac66cd0c25ba058b2c9519066fc53b0bcc19d0b213666aa91f1d5b280e47a5d21e64393a503c91b58a
- SSDEEP 49152:RzbZDEJIsIxTgACSqPRIXdqGvTop/QhVvw4j:Rz2dIx6SldOQ
- TLSH T13B959E02A7C080B2E64E17751167E7BA5E399D354328C5CBD7A03D759E312D3AA3B38E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.