General
- Target jaffacakes118_Trojan-Dropper.Win32.StartPage.ajg.775e8875532a6ac028de3046a5a75c9a
- Size 7.4MB
- Sample261009-y239faes2w
- SHA256 27fa51ad4a0e4399f0709745d91a82690c75f55ebe5b77d9d3e925d1f17910d8
- MD5 775e8875532a6ac028de3046a5a75c9a
- SHA1 cecfcd9f40abd0b31705f9e14c409ef87a69dc23
- SHA512 87a0d65feee66f2cd5aa781f0c3d914b2e3f79bf6f7f8332f5a94f249c7fc1e50d386ccb609840b2524fc3322e220265cf19d77fa585355313e21dc2678036cf
- SSDEEP 196608:Z6h4rK4mCz2lI5BbybqIQGld8cDdpXWQ7:MSmCyywqSXh7
- TLSH T1D27633789BA1D996C06256B441EB2784F93EFF348620CDEB689C36130CD7FF59C12A94
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.StartPage.ajg.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.StartPage.ajg.775e8875532a6ac028de3046a5a75c9a
- Size 7.4MB
- SHA256 27fa51ad4a0e4399f0709745d91a82690c75f55ebe5b77d9d3e925d1f17910d8
- MD5 775e8875532a6ac028de3046a5a75c9a
- SHA1 cecfcd9f40abd0b31705f9e14c409ef87a69dc23
- SHA512 87a0d65feee66f2cd5aa781f0c3d914b2e3f79bf6f7f8332f5a94f249c7fc1e50d386ccb609840b2524fc3322e220265cf19d77fa585355313e21dc2678036cf
- SSDEEP 196608:Z6h4rK4mCz2lI5BbybqIQGld8cDdpXWQ7:MSmCyywqSXh7
- TLSH T1D27633789BA1D996C06256B441EB2784F93EFF348620CDEB689C36130CD7FF59C12A94
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Executes a VBScript file via the Windows Script Host.