General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8976fbf256c1f7dbc539a12128c41655
- Size 1.1MB
- Sample261014-gc5mjay1fs
- SHA256 57c632464141a668055b874ea4b32a7b2e70cf95ee9025b951bdb779730b2dd2
- MD5 8976fbf256c1f7dbc539a12128c41655
- SHA1 490fbd38e8177e87daf2c35e139a580f6658ef61
- SHA512 13e8415c5321b1c2dbe15423dadef15a8e15ed78ae616c75906f9ffca20a01affdabac72a12cc44c93e142283775cc48f37bc88e96f732b72033438a69ee3989
- SSDEEP 12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQiF:8V4W8hqBYgnBLfVqx1WjkvF
- TLSH T1403517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8976fbf256c1f7dbc539a12128c41655
- Size 1.1MB
- SHA256 57c632464141a668055b874ea4b32a7b2e70cf95ee9025b951bdb779730b2dd2
- MD5 8976fbf256c1f7dbc539a12128c41655
- SHA1 490fbd38e8177e87daf2c35e139a580f6658ef61
- SHA512 13e8415c5321b1c2dbe15423dadef15a8e15ed78ae616c75906f9ffca20a01affdabac72a12cc44c93e142283775cc48f37bc88e96f732b72033438a69ee3989
- SSDEEP 12288:XsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQiF:8V4W8hqBYgnBLfVqx1WjkvF
- TLSH T1403517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1