General
- Target jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.c6851f4f3bfaef84eb37c38f1a030ce2
- Size 112KB
- Sample261014-ebdfjse191
- SHA256 fb5d05b3c47b9958caf11a9017f3aa684dde72d24210e39ae8c5b9aabda68ea6
- MD5 c6851f4f3bfaef84eb37c38f1a030ce2
- SHA1 7b650cd058cb59ba2f27f588f4ad344b0c0852f0
- SHA512 879e5e5b5ab227a429b038d3c0a737d09b3eec2f68df03492fa0f158bee5a36bcc854d443d8a82fb9aecfde0d78cf0216316f9b609ebf4910131b1f4f256e0ac
- SSDEEP 1536:TLXB65939tY6HBg4sXJ9hAchXFceuMiSLnVlAchXFsOcVf29462:TLk395hYXJ9hAcMOiqnDAcrU62
- TLSH T164B3090F2B4494BADF520730D856F6659673BDC536FA054F23083BFE1AB76821927A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.exe
Resource
win10v2004-20260911-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.exe
Resource
win11ltsc2024-20260911-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.c6851f4f3bfaef84eb37c38f1a030ce2
- Size 112KB
- SHA256 fb5d05b3c47b9958caf11a9017f3aa684dde72d24210e39ae8c5b9aabda68ea6
- MD5 c6851f4f3bfaef84eb37c38f1a030ce2
- SHA1 7b650cd058cb59ba2f27f588f4ad344b0c0852f0
- SHA512 879e5e5b5ab227a429b038d3c0a737d09b3eec2f68df03492fa0f158bee5a36bcc854d443d8a82fb9aecfde0d78cf0216316f9b609ebf4910131b1f4f256e0ac
- SSDEEP 1536:TLXB65939tY6HBg4sXJ9hAchXFceuMiSLnVlAchXFsOcVf29462:TLk395hYXJ9hAcMOiqnDAcrU62
- TLSH T164B3090F2B4494BADF520730D856F6659673BDC536FA054F23083BFE1AB76821927A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1