General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.71392e7182985de2153dc299a62b447d
- Size 1.1MB
- Sample261014-gbb9lay1ds
- SHA256 9289932eae9390487de3fea551d7609a19be4efe696271d7578aa8338c729ac0
- MD5 71392e7182985de2153dc299a62b447d
- SHA1 54ce6defa35a9d82226de92d560eccf6dd2db054
- SHA512 ff273d31350337f95c873e025a1de63ef768c17e437840e90aa530146d25a6ab5f463e6a55bf4029dc44d50dbf28bb5c9a02e728c08ef830392084a8a9015951
- SSDEEP 12288:usM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQjc:lV4W8hqBYgnBLfVqx1Wjkec
- TLSH T19A3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.71392e7182985de2153dc299a62b447d
- Size 1.1MB
- SHA256 9289932eae9390487de3fea551d7609a19be4efe696271d7578aa8338c729ac0
- MD5 71392e7182985de2153dc299a62b447d
- SHA1 54ce6defa35a9d82226de92d560eccf6dd2db054
- SHA512 ff273d31350337f95c873e025a1de63ef768c17e437840e90aa530146d25a6ab5f463e6a55bf4029dc44d50dbf28bb5c9a02e728c08ef830392084a8a9015951
- SSDEEP 12288:usM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQjc:lV4W8hqBYgnBLfVqx1Wjkec
- TLSH T19A3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1