General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3c910671fd3b2579a8ea851193294cd8
- Size 592KB
- Sample261014-cd65jaez3j
- SHA256 e6b60affd7ccd5f64a1cb9f524179337ed3460b750934e2d29597bb40e7828f9
- MD5 3c910671fd3b2579a8ea851193294cd8
- SHA1 169d3e64cfad292926c3a9193aa6668991299c7f
- SHA512 4f3d4e8e82e5d54630b2812ec649ac3c88d5a64c09f506da5f5def8148d5d6dbc498e7d7e317e9f2691c2812156881afa239d1f97de766d134a1b772a58c707e
- SSDEEP 12288:fvoOqYdOtHrWWqvdbhKjJWZYMhHizolcrA7+9T16ScAk24gNSDOvuCQZLyYGM:oXOMB4Zy
- TLSH T138D46B343DEA501AF273EFB99BE475AADA6FB3733B07A45A105003464713A81DDC163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3c910671fd3b2579a8ea851193294cd8
- Size 592KB
- SHA256 e6b60affd7ccd5f64a1cb9f524179337ed3460b750934e2d29597bb40e7828f9
- MD5 3c910671fd3b2579a8ea851193294cd8
- SHA1 169d3e64cfad292926c3a9193aa6668991299c7f
- SHA512 4f3d4e8e82e5d54630b2812ec649ac3c88d5a64c09f506da5f5def8148d5d6dbc498e7d7e317e9f2691c2812156881afa239d1f97de766d134a1b772a58c707e
- SSDEEP 12288:fvoOqYdOtHrWWqvdbhKjJWZYMhHizolcrA7+9T16ScAk24gNSDOvuCQZLyYGM:oXOMB4Zy
- TLSH T138D46B343DEA501AF273EFB99BE475AADA6FB3733B07A45A105003464713A81DDC163A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext