General
- Target jaffacakes118_Trojan-Dropper.Win32.Delf.ab.9b1cac1372875adac79380652ed5af6b
- Size 92KB
- Sample261009-wmax8sdc65
- SHA256 7cbe6e0e27c43a46d705dd86d03c1eca5890ceebc9e2eb5dbda06615c2fd4ba4
- MD5 9b1cac1372875adac79380652ed5af6b
- SHA1 458564e161f784e167d7427225335176d50a4ec3
- SHA512 de481c629f8846c16f833f67e3d72ad079f92ddef352b672b6c5be78ca64ea4a65310c0aff342c2ce9617c0061230e859625506a6da3a78f2f4140dcb53cf938
- SSDEEP 1536:gZSqzS/1sYCDZeSoFr8pTTign/Hx8d22gX5ieNq5tQQW6zyXHzWisgjZWeT1GcjM:sS/1cDZ7Ar8pd1HGQQVuTJPFT1GcX
- TLSH T11493CF6E75799BB1C490D1BCCF6E91FCBEA394A7740A396564433BCA5CBE3400A068C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Delf.ab.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Delf.ab.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Delf.ab.9b1cac1372875adac79380652ed5af6b
- Size 92KB
- SHA256 7cbe6e0e27c43a46d705dd86d03c1eca5890ceebc9e2eb5dbda06615c2fd4ba4
- MD5 9b1cac1372875adac79380652ed5af6b
- SHA1 458564e161f784e167d7427225335176d50a4ec3
- SHA512 de481c629f8846c16f833f67e3d72ad079f92ddef352b672b6c5be78ca64ea4a65310c0aff342c2ce9617c0061230e859625506a6da3a78f2f4140dcb53cf938
- SSDEEP 1536:gZSqzS/1sYCDZeSoFr8pTTign/Hx8d22gX5ieNq5tQQW6zyXHzWisgjZWeT1GcjM:sS/1cDZ7Ar8pd1HGQQVuTJPFT1GcX
- TLSH T11493CF6E75799BB1C490D1BCCF6E91FCBEA394A7740A396564433BCA5CBE3400A068C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1