General
- Target jaffacakes118_Trojan-Dropper.Win32.ExeStealth.22.903116d640cfaf9a0840fecec6c80113
- Size 413KB
- Sample261009-xavybadf47
- SHA256 68304246c95aa39b97196af69db393172d273ce62745dd25d94a7238e4e0926e
- MD5 903116d640cfaf9a0840fecec6c80113
- SHA1 2848f63aa618b8b83b03ae79789cfea4cbdcbced
- SHA512 3301e435563b1b58809a38473ca02bbf09409b9e0be379c69fe1b257042006908275b520bd480f13d0e36eeb3c5d36515a770d4b14b49f38128cb638c2a048c5
- SSDEEP 6144:46IE/smCm0rN3Uj61AoSkzKRrcvaAQNoL68UC5agYhffHK2+VpQDvg6BelcGwKOU:46IE/sm4VoFW+8UkanK5PQYlcGwKOD+V
- TLSH T1D894121D4933D65AE7BAE7FECAF918E47E03C48453E53A6B16EC6FE002518B859CD402
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.ExeStealth.22.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.ExeStealth.22.903116d640cfaf9a0840fecec6c80113
- Size 413KB
- SHA256 68304246c95aa39b97196af69db393172d273ce62745dd25d94a7238e4e0926e
- MD5 903116d640cfaf9a0840fecec6c80113
- SHA1 2848f63aa618b8b83b03ae79789cfea4cbdcbced
- SHA512 3301e435563b1b58809a38473ca02bbf09409b9e0be379c69fe1b257042006908275b520bd480f13d0e36eeb3c5d36515a770d4b14b49f38128cb638c2a048c5
- SSDEEP 6144:46IE/smCm0rN3Uj61AoSkzKRrcvaAQNoL68UC5agYhffHK2+VpQDvg6BelcGwKOU:46IE/sm4VoFW+8UkanK5PQYlcGwKOD+V
- TLSH T1D894121D4933D65AE7BAE7FECAF918E47E03C48453E53A6B16EC6FE002518B859CD402
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE