General
- Target jaffacakes118_Trojan-Dropper.Win32.Dorifel.awqb.500a5f3adf0286f823fbc5b03e96f4cd
- Size 41KB
- Sample261012-yf5kdazwcs
- SHA256 7351ba699ac13e48bf522d782026b942ead2112b61c930f2a9cf525d77312488
- MD5 500a5f3adf0286f823fbc5b03e96f4cd
- SHA1 8d7fcf4c8e32f84785b0c5110db0780f4534552d
- SHA512 b8d449104306b162c1b64516f8f2c0388f153ab07f65762d9b4c39361b82282084bbb6113ae830894b155aa86e7e29de138aedb7414c88f5f8a502e96198d51d
- SSDEEP 768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUnEoNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmUNNzd
- TLSH T1CF133B366F802AB7C9400C72025B6BB1E3F7EE7149729EE2876035392D7599A4B01FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awqb.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Dropper.Win32.Dorifel.awqb.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Dropper.Win32.Dorifel.awqb.500a5f3adf0286f823fbc5b03e96f4cd
- Size 41KB
- SHA256 7351ba699ac13e48bf522d782026b942ead2112b61c930f2a9cf525d77312488
- MD5 500a5f3adf0286f823fbc5b03e96f4cd
- SHA1 8d7fcf4c8e32f84785b0c5110db0780f4534552d
- SHA512 b8d449104306b162c1b64516f8f2c0388f153ab07f65762d9b4c39361b82282084bbb6113ae830894b155aa86e7e29de138aedb7414c88f5f8a502e96198d51d
- SSDEEP 768:QIBar1ZIZYnfI9opm6AIHIjaI7g9mVmUnEoNE/W5dRV8:pW1ZIZqI9opm6AIHIjzmUNNzd
- TLSH T1CF133B366F802AB7C9400C72025B6BB1E3F7EE7149729EE2876035392D7599A4B01FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.