General
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.46eabf5250c80db26097e89bc721b5e3
- Size 1.0MB
- Sample261012-yd85saet8v
- SHA256 216e3f48e11206e939fb0d05750fb961c662ca70deeb14caf73021e124566d80
- MD5 46eabf5250c80db26097e89bc721b5e3
- SHA1 d3bad8367b77f9773fb6dd59f76965e937865489
- SHA512 9578603086474f77b19992746ed60edce3d886e70f68633f32c9460ab4634e17f5a11f82e8806bcae5686fe7b7b23fd3f5264f97dc7ffa12eac15ba7da744e66
- SSDEEP 24576:BZuFhCwUuqDluBMfEhJX3z5mKhwbLeoMQ:EhxqDosEL3F/w+Q
- TLSH T1453533A328D1E54BD16352B61231ABE2FBF493CD4471EA55473D8EF8A91F09BC306D81
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Agent.emlq.46eabf5250c80db26097e89bc721b5e3
- Size 1.0MB
- SHA256 216e3f48e11206e939fb0d05750fb961c662ca70deeb14caf73021e124566d80
- MD5 46eabf5250c80db26097e89bc721b5e3
- SHA1 d3bad8367b77f9773fb6dd59f76965e937865489
- SHA512 9578603086474f77b19992746ed60edce3d886e70f68633f32c9460ab4634e17f5a11f82e8806bcae5686fe7b7b23fd3f5264f97dc7ffa12eac15ba7da744e66
- SSDEEP 24576:BZuFhCwUuqDluBMfEhJX3z5mKhwbLeoMQ:EhxqDosEL3F/w+Q
- TLSH T1453533A328D1E54BD16352B61231ABE2FBF493CD4471EA55473D8EF8A91F09BC306D81
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL