General
- Target jaffacakes118_Trojan-Downloader.Win32.NSIS.nb.27d5ca3afe3c57445c29353427f0c0fc
- Size 1.4MB
- Sample261012-x91b3set2t
- SHA256 70744055971bfc9e06b36a0712669a747e538b6f4069bd7df54a3e3f8555cc03
- MD5 27d5ca3afe3c57445c29353427f0c0fc
- SHA1 af82cd8f5bd040ab6095bff63fc4e8b8d9aafa20
- SHA512 130d4911b41fe1ad45c2fae5a40883662218bef380df6926a5b6dadb3e1143870e8d19713e99a5d33fa6a9f0e60327b4cc83dc2b6c6c9fcce77f1922d97ee10f
- SSDEEP 24576:T+r/4p6qO4pDlPJsZtZQk5p8hulbEwfbHJFpBzjRvdsxlTShiVr:G/4Qf4pxPctqG8IltpFnxvdsxZ4Ur
- TLSH T1ED6533930C965E3AF7B24F39256B837657FECF90439A06DE26C9BB0624D4013123732A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Downloader.Win32.NSIS.nb.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Downloader.Win32.NSIS.nb.27d5ca3afe3c57445c29353427f0c0fc
- Size 1.4MB
- SHA256 70744055971bfc9e06b36a0712669a747e538b6f4069bd7df54a3e3f8555cc03
- MD5 27d5ca3afe3c57445c29353427f0c0fc
- SHA1 af82cd8f5bd040ab6095bff63fc4e8b8d9aafa20
- SHA512 130d4911b41fe1ad45c2fae5a40883662218bef380df6926a5b6dadb3e1143870e8d19713e99a5d33fa6a9f0e60327b4cc83dc2b6c6c9fcce77f1922d97ee10f
- SSDEEP 24576:T+r/4p6qO4pDlPJsZtZQk5p8hulbEwfbHJFpBzjRvdsxlTShiVr:G/4Qf4pxPctqG8IltpFnxvdsxZ4Ur
- TLSH T1ED6533930C965E3AF7B24F39256B837657FECF90439A06DE26C9BB0624D4013123732A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.