General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.0736b1127365d8d688c18a1965b07751
- Size 52KB
- Sample261013-1rpdmstybx
- SHA256 49102d46fa8eeb26806ff029066789ddb7ddf082fa4d55be3b65942975f5c09c
- MD5 0736b1127365d8d688c18a1965b07751
- SHA1 3f6bbd7c8247244a4ac8b471e71347b304e21da8
- SHA512 54e44394201a2b47f787429097aac58aa9a4b634bce04553106a0ccd8ea408fe58f776afdddc62e1c0442ea9515edd2fb67365e3d955ef2f339c7ff6a211ec56
- SSDEEP 768:Pp7NnEaYY5KlrBaP1MHfMQocdIt8tZenWpf+yb1I4zVZ5tHn0ZPUWz0IUUiM95Z:PpOa/2oMRO+WWdNbrVZ70ZCIVJ9
- TLSH T1B7338C837AC0EC92C5218DB0257F177ACF77FD354D64850B8B10BE5D2E36E9294A22AD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.0736b1127365d8d688c18a1965b07751
- Size 52KB
- SHA256 49102d46fa8eeb26806ff029066789ddb7ddf082fa4d55be3b65942975f5c09c
- MD5 0736b1127365d8d688c18a1965b07751
- SHA1 3f6bbd7c8247244a4ac8b471e71347b304e21da8
- SHA512 54e44394201a2b47f787429097aac58aa9a4b634bce04553106a0ccd8ea408fe58f776afdddc62e1c0442ea9515edd2fb67365e3d955ef2f339c7ff6a211ec56
- SSDEEP 768:Pp7NnEaYY5KlrBaP1MHfMQocdIt8tZenWpf+yb1I4zVZ5tHn0ZPUWz0IUUiM95Z:PpOa/2oMRO+WWdNbrVZ70ZCIVJ9
- TLSH T1B7338C837AC0EC92C5218DB0257F177ACF77FD354D64850B8B10BE5D2E36E9294A22AD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1