General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.41db31489393f9ddb19bdcffc5e9e191
- Size 22KB
- Sample261014-ctklgae13p
- SHA256 d4653e02b08b460309393ae9023ee9d07c404e4a4031044dbbde86b9ffc010c8
- MD5 41db31489393f9ddb19bdcffc5e9e191
- SHA1 88078cd10fb213bb7b636cfb2342c8a550daa43c
- SHA512 321319779dffe77bc59aa806d4ca688c4c1a7ddcdd952ccf910bd6573177919929d67bed692303c327557c60a2d6bf5ea963a56994b8dddf6a0d227b230b0a42
- SSDEEP 384:yZ/0VRUTv5mpDnHfPzzmtkFD0gZvSYAWYeO3lEor/p2EWCbnxA4fCWf93zy0:rD4v5mBn/Pz6aDEXrlD/4EWWn+FKy
- TLSH T148A2AF471BB85E88E0BFD3306A3293122C78FD54B17E962E1C5525FF2C45A188E60AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.41db31489393f9ddb19bdcffc5e9e191
- Size 22KB
- SHA256 d4653e02b08b460309393ae9023ee9d07c404e4a4031044dbbde86b9ffc010c8
- MD5 41db31489393f9ddb19bdcffc5e9e191
- SHA1 88078cd10fb213bb7b636cfb2342c8a550daa43c
- SHA512 321319779dffe77bc59aa806d4ca688c4c1a7ddcdd952ccf910bd6573177919929d67bed692303c327557c60a2d6bf5ea963a56994b8dddf6a0d227b230b0a42
- SSDEEP 384:yZ/0VRUTv5mpDnHfPzzmtkFD0gZvSYAWYeO3lEor/p2EWCbnxA4fCWf93zy0:rD4v5mBn/Pz6aDEXrlD/4EWWn+FKy
- TLSH T148A2AF471BB85E88E0BFD3306A3293122C78FD54B17E962E1C5525FF2C45A188E60AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory