General
- Target jaffacakes118_Packed.Win32.TDSS.z.1b440395fa7d1ad9781593a0b2878aef
- Size 4.2MB
- Sample261012-xwtblsd12t
- SHA256 7dc1da6be69cff7a3af49e526f9c33ae853fbc169876fc42c66dd5a54e8c9d3f
- MD5 1b440395fa7d1ad9781593a0b2878aef
- SHA1 efb2d4070fdc3b4afd3bf87e7403f52d8114af4a
- SHA512 42e97912c8370954f25f811c55bc8a52e557643cad3a1bdef870727ac521753e1d4a76aaadb5cee13bb866c4175e575bf52df00d84156a9ec8e2d4be25d18f2b
- SSDEEP 98304:NZVpvk3IobzT8VSPFjYW9m44CQ4/ozXNEtQTvvL/lUX:RpvXobzT8Vu5YWb3Q4+f/GX
- TLSH T1552633A239DAC1BBD0A572F444F1191347777CC96A7583ABA3C20AF98E50FD0A135B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Packed.Win32.TDSS.z.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Packed.Win32.TDSS.z.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Packed.Win32.TDSS.z.1b440395fa7d1ad9781593a0b2878aef
- Size 4.2MB
- SHA256 7dc1da6be69cff7a3af49e526f9c33ae853fbc169876fc42c66dd5a54e8c9d3f
- MD5 1b440395fa7d1ad9781593a0b2878aef
- SHA1 efb2d4070fdc3b4afd3bf87e7403f52d8114af4a
- SHA512 42e97912c8370954f25f811c55bc8a52e557643cad3a1bdef870727ac521753e1d4a76aaadb5cee13bb866c4175e575bf52df00d84156a9ec8e2d4be25d18f2b
- SSDEEP 98304:NZVpvk3IobzT8VSPFjYW9m44CQ4/ozXNEtQTvvL/lUX:RpvXobzT8Vu5YWb3Q4+f/GX
- TLSH T1552633A239DAC1BBD0A572F444F1191347777CC96A7583ABA3C20AF98E50FD0A135B1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.