General
- Target jaffacakes118_Trojan-Dropper.Win32.Fimarker.56e9b2215d0ea83651dec20b375844f2
- Size 696KB
- Sample261009-xb3pjsdf65
- SHA256 5b9128e5ba4e11988a013ed7b145148cd2c992209a49016f09c3b52677c8efa8
- MD5 56e9b2215d0ea83651dec20b375844f2
- SHA1 053c3727d77e7e5f25a1302311512d2e0523473f
- SHA512 1d1130657fd4040124cb9324c9e50cc07db3be2a119032422e33e885dd808e8917db29fba8edcdbf222990b4fdcdde9196e5bfd68e56a751d0bd3da6a1b51ee2
- SSDEEP 12288:CTRQH2YwnLQh/oMVEbjCc0HBAeBuVdbMmUhDCw7QRzLVdaZ5sEyVL1M6dl+Q0:sM2YwO/z0Vu6XdbMmUhDCwcVaZOzM6d
- TLSH T1C9E40120F194889AF1A38074C55317EA4965AD358FD0C2CFA7B0FFCE0FB95E4A97850A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Fimarker.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Fimarker.56e9b2215d0ea83651dec20b375844f2
- Size 696KB
- SHA256 5b9128e5ba4e11988a013ed7b145148cd2c992209a49016f09c3b52677c8efa8
- MD5 56e9b2215d0ea83651dec20b375844f2
- SHA1 053c3727d77e7e5f25a1302311512d2e0523473f
- SHA512 1d1130657fd4040124cb9324c9e50cc07db3be2a119032422e33e885dd808e8917db29fba8edcdbf222990b4fdcdde9196e5bfd68e56a751d0bd3da6a1b51ee2
- SSDEEP 12288:CTRQH2YwnLQh/oMVEbjCc0HBAeBuVdbMmUhDCw7QRzLVdaZ5sEyVL1M6dl+Q0:sM2YwO/z0Vu6XdbMmUhDCwcVaZOzM6d
- TLSH T1C9E40120F194889AF1A38074C55317EA4965AD358FD0C2CFA7B0FFCE0FB95E4A97850A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.