General
- Target jaffacakes118_Trojan-Dropper.Win32.Daws.awew.3f899c1a8c0e52187165410ed2f1598b
- Size 134KB
- Sample261009-wheqmacv5x
- SHA256 a3f9a8c98c7ee05d870532889e0b899aef3da48c4153d5db61230ad71c8aeae2
- MD5 3f899c1a8c0e52187165410ed2f1598b
- SHA1 7e6a9c47912616ec59db582c782dbda795bd15fd
- SHA512 2e7d6a39ded15a53434f665aa35618dfa79fbf0f883cb50028abb0d617437b0fa56a9fc7fcbe90487f9217d792a30193de57f85c735d9a25d0800c89a271c72d
- SSDEEP 3072:xQalhfW5k7+aJe1mgawzxsBub86VywpZhKqio6ddOp:6al0TV5nzZa
- TLSH T1F1D3AF22B9C5C072D45640B51436CB719BBFBD32166893837B64BAFB5F332C5AD2B206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Daws.awew.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Daws.awew.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Daws.awew.3f899c1a8c0e52187165410ed2f1598b
- Size 134KB
- SHA256 a3f9a8c98c7ee05d870532889e0b899aef3da48c4153d5db61230ad71c8aeae2
- MD5 3f899c1a8c0e52187165410ed2f1598b
- SHA1 7e6a9c47912616ec59db582c782dbda795bd15fd
- SHA512 2e7d6a39ded15a53434f665aa35618dfa79fbf0f883cb50028abb0d617437b0fa56a9fc7fcbe90487f9217d792a30193de57f85c735d9a25d0800c89a271c72d
- SSDEEP 3072:xQalhfW5k7+aJe1mgawzxsBub86VywpZhKqio6ddOp:6al0TV5nzZa
- TLSH T1F1D3AF22B9C5C072D45640B51436CB719BBFBD32166893837B64BAFB5F332C5AD2B206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory