General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.6284aa8e25872f6c88bb4db0bcbf82d5
- Size 1.1MB
- Sample261014-gamzpsef59
- SHA256 b341c298aece7cc15e4e42d8eec45366fdca072d8d29e8976ccc934879eb7998
- MD5 6284aa8e25872f6c88bb4db0bcbf82d5
- SHA1 3f1c75a0741b343d95d08e05a4226e4ff3eb4f42
- SHA512 a47a8a2eb5910ba6b1ab3f7da59b08cf792a06a1b23d0f905b8de84404e4ebcb591147754592eeb7a1c71c50986f5fcd834d85d9bf5d90177c5f09799e310e27
- SSDEEP 12288:fsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQa:kV4W8hqBYgnBLfVqx1Wjkn
- TLSH T15F3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.6284aa8e25872f6c88bb4db0bcbf82d5
- Size 1.1MB
- SHA256 b341c298aece7cc15e4e42d8eec45366fdca072d8d29e8976ccc934879eb7998
- MD5 6284aa8e25872f6c88bb4db0bcbf82d5
- SHA1 3f1c75a0741b343d95d08e05a4226e4ff3eb4f42
- SHA512 a47a8a2eb5910ba6b1ab3f7da59b08cf792a06a1b23d0f905b8de84404e4ebcb591147754592eeb7a1c71c50986f5fcd834d85d9bf5d90177c5f09799e310e27
- SSDEEP 12288:fsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQa:kV4W8hqBYgnBLfVqx1Wjkn
- TLSH T15F3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1