General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.7dcc75ebb87ccc3f2d29c7485ee70d60
- Size 1.1MB
- Sample261014-gb96maef64
- SHA256 69f55c53d367eb8ba92b4e70ecae93e34e2d57c1475eca8c436f2d9d67b2f48f
- MD5 7dcc75ebb87ccc3f2d29c7485ee70d60
- SHA1 e8a1673ebaa4618e6318f1774401e42764296377
- SHA512 cf86b743b7405eec18eb66a61903b5d970d6089ab8113ab0430e3e1947827c444ab715ca30a478dd1f76417bb89020149d5aee384e0e479139e0f4d30f402181
- SSDEEP 12288:HsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQyc:MV4W8hqBYgnBLfVqx1Wjkfc
- TLSH T1443517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.7dcc75ebb87ccc3f2d29c7485ee70d60
- Size 1.1MB
- SHA256 69f55c53d367eb8ba92b4e70ecae93e34e2d57c1475eca8c436f2d9d67b2f48f
- MD5 7dcc75ebb87ccc3f2d29c7485ee70d60
- SHA1 e8a1673ebaa4618e6318f1774401e42764296377
- SHA512 cf86b743b7405eec18eb66a61903b5d970d6089ab8113ab0430e3e1947827c444ab715ca30a478dd1f76417bb89020149d5aee384e0e479139e0f4d30f402181
- SSDEEP 12288:HsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQyc:MV4W8hqBYgnBLfVqx1Wjkfc
- TLSH T1443517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1