General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.46871bd2747c15edaf8dd387b790a7b9
- Size 1.0MB
- Sample261012-yd5glaet8s
- SHA256 d26a1d695d16cf344cf66a0979515dba7b655ee7981d61f469cead0bfc5c456d
- MD5 46871bd2747c15edaf8dd387b790a7b9
- SHA1 39d9661e14c42c738a2ed30933bb6641a16afa35
- SHA512 7fc2be59d67968c1cb192d02b4429467c84a3f7b70dd843ce67c173c7bc8e11c9e93efe9ad08ec2a7cfbb75cf4ba2c4a91e96e5d386408649820aa935f6664a0
- SSDEEP 24576:B8uFhCwUuqDluBMfEhJX3z5mKhwbLeoMRD:vhxqDosEL3F/w+V
- TLSH T1F535336338D2EA57D26711B66232E7F2FBB4538C4471EA15432D8DF4E91F0AAC306E52
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.46871bd2747c15edaf8dd387b790a7b9
- Size 1.0MB
- SHA256 d26a1d695d16cf344cf66a0979515dba7b655ee7981d61f469cead0bfc5c456d
- MD5 46871bd2747c15edaf8dd387b790a7b9
- SHA1 39d9661e14c42c738a2ed30933bb6641a16afa35
- SHA512 7fc2be59d67968c1cb192d02b4429467c84a3f7b70dd843ce67c173c7bc8e11c9e93efe9ad08ec2a7cfbb75cf4ba2c4a91e96e5d386408649820aa935f6664a0
- SSDEEP 24576:B8uFhCwUuqDluBMfEhJX3z5mKhwbLeoMRD:vhxqDosEL3F/w+V
- TLSH T1F535336338D2EA57D26711B66232E7F2FBB4538C4471EA15432D8DF4E91F0AAC306E52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL