General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.6fe7562a4c9a4b54d370e67fc6480ec3
- Size 1.1MB
- Sample261014-garynay1ct
- SHA256 22821074e3d897224e217af087577d50bde71e0db2f720d043ed140962e5e14a
- MD5 6fe7562a4c9a4b54d370e67fc6480ec3
- SHA1 bbb78418d2c86897b03a7a4b9e4202ccfa9a2d2c
- SHA512 f71764ada31202830fda290680cfe42bd9b9ae7e6b8f8e1ab814c6bcbc6b0bebc064a9d3cf3d7a4fac7c923162f1437602bb58435410698bc2f74e24c035d12b
- SSDEEP 12288:3sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQC1:cV4W8hqBYgnBLfVqx1WjkP1
- TLSH T1ED3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.6fe7562a4c9a4b54d370e67fc6480ec3
- Size 1.1MB
- SHA256 22821074e3d897224e217af087577d50bde71e0db2f720d043ed140962e5e14a
- MD5 6fe7562a4c9a4b54d370e67fc6480ec3
- SHA1 bbb78418d2c86897b03a7a4b9e4202ccfa9a2d2c
- SHA512 f71764ada31202830fda290680cfe42bd9b9ae7e6b8f8e1ab814c6bcbc6b0bebc064a9d3cf3d7a4fac7c923162f1437602bb58435410698bc2f74e24c035d12b
- SSDEEP 12288:3sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQC1:cV4W8hqBYgnBLfVqx1WjkP1
- TLSH T1ED3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1