General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.4b8bfc3e1144e80f56ff49ec7f04287d
- Size 193KB
- Sample261014-dabd5axwcs
- SHA256 39118b22e3a58524b140f9f9edbcc04a1fbddc8e769533a0da04e61863334cab
- MD5 4b8bfc3e1144e80f56ff49ec7f04287d
- SHA1 bba42abca533ee62fd919a0c0a75850f9249e8f9
- SHA512 85e61600e6bb1a824fd6a3f46220a3ed80a264575bcf196a6ab81ccec7611885b5080507fdb7cbd5bee146fda8c8ee37d950c59081a331b05626c0caa41e61ae
- SSDEEP 3072:7QIURTXJA+99wt//7fDw9us5BzXFtmDDbJZ0k8uLkWFt1MmyfEkMRi9zWh69ugdc:7sOq9q7fDM5BLF43LLkWF/SM4KkItJ
- TLSH T1EC1412A2E6C44867D51BCF7742B7DA7B9A72E32D0B030D472F10AF5B58930C2A91964F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.4b8bfc3e1144e80f56ff49ec7f04287d
- Size 193KB
- SHA256 39118b22e3a58524b140f9f9edbcc04a1fbddc8e769533a0da04e61863334cab
- MD5 4b8bfc3e1144e80f56ff49ec7f04287d
- SHA1 bba42abca533ee62fd919a0c0a75850f9249e8f9
- SHA512 85e61600e6bb1a824fd6a3f46220a3ed80a264575bcf196a6ab81ccec7611885b5080507fdb7cbd5bee146fda8c8ee37d950c59081a331b05626c0caa41e61ae
- SSDEEP 3072:7QIURTXJA+99wt//7fDw9us5BzXFtmDDbJZ0k8uLkWFt1MmyfEkMRi9zWh69ugdc:7sOq9q7fDM5BLF43LLkWF/SM4KkItJ
- TLSH T1EC1412A2E6C44867D51BCF7742B7DA7B9A72E32D0B030D472F10AF5B58930C2A91964F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Server Software Component: Terminal Services DLL
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory