General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.46ba2e81991afb3e41d50ade209a5921
- Size 1.1MB
- Sample261014-f79paswx3p
- SHA256 cec2329596c791e3862968b3baa1f591bb4c9546b5fc2048b76952c9c49b0b8b
- MD5 46ba2e81991afb3e41d50ade209a5921
- SHA1 ec6c2f947f58a066f06c578f9d0a7cb0efe5ddb7
- SHA512 79f7ec7d9edea7e9f5a49fcaf5cc019c41d1562eca42db5c925e9ab193da62633c56429ebf9e5a6f9a15b5b6b9337b15d5af6efe1dea0e7144384fe575ffd83b
- SSDEEP 12288:fsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQat:kV4W8hqBYgnBLfVqx1Wjknt
- TLSH T19B3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.46ba2e81991afb3e41d50ade209a5921
- Size 1.1MB
- SHA256 cec2329596c791e3862968b3baa1f591bb4c9546b5fc2048b76952c9c49b0b8b
- MD5 46ba2e81991afb3e41d50ade209a5921
- SHA1 ec6c2f947f58a066f06c578f9d0a7cb0efe5ddb7
- SHA512 79f7ec7d9edea7e9f5a49fcaf5cc019c41d1562eca42db5c925e9ab193da62633c56429ebf9e5a6f9a15b5b6b9337b15d5af6efe1dea0e7144384fe575ffd83b
- SSDEEP 12288:fsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQat:kV4W8hqBYgnBLfVqx1Wjknt
- TLSH T19B3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1