General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e
- Size 508KB
- Sample261014-cdh3psty8m
- SHA256 5f8dd873b62d1776a4570e3eb1004f3692b309ccc78c61abbceef7e5d898f0a4
- MD5 3c2e63d56a649fb8b20095448cf3a22e
- SHA1 0941e48e63899661f4c189d03a1794194324b995
- SHA512 94330c6b30111b5661769c088dcd6fd3e998e6aa04c8c9a569497cea8b8478fd4d9066dd52fede24c5e0c6d3c98dd4f3a0b038004f4a55d92eed954d516e49e8
- SSDEEP 12288:XLL6iub80MMnMMMMMRgPurDGSweuxkQFwACc6KqDmLHI2WM7rDAi3/4KKQkR:XLL6lbrMMnMMMMMQuj4tC+qDeH9DGzQ
- TLSH T106B42257F4903DD8C9CE063B98039399CEAB5B65C635ABA20E54FF1F7FB21A14394A10
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.3c2e63d56a649fb8b20095448cf3a22e
- Size 508KB
- SHA256 5f8dd873b62d1776a4570e3eb1004f3692b309ccc78c61abbceef7e5d898f0a4
- MD5 3c2e63d56a649fb8b20095448cf3a22e
- SHA1 0941e48e63899661f4c189d03a1794194324b995
- SHA512 94330c6b30111b5661769c088dcd6fd3e998e6aa04c8c9a569497cea8b8478fd4d9066dd52fede24c5e0c6d3c98dd4f3a0b038004f4a55d92eed954d516e49e8
- SSDEEP 12288:XLL6iub80MMnMMMMMRgPurDGSweuxkQFwACc6KqDmLHI2WM7rDAi3/4KKQkR:XLL6lbrMMnMMMMMQuj4tC+qDeH9DGzQ
- TLSH T106B42257F4903DD8C9CE063B98039399CEAB5B65C635ABA20E54FF1F7FB21A14394A10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application