General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.89fa0a4b83b0c1ef61379526ac7ab1aa
- Size 1.1MB
- Sample261014-gdeshagy3m
- SHA256 d4957d893d17715d877c353beabc8802106267568c49f3991025f600bdbc6442
- MD5 89fa0a4b83b0c1ef61379526ac7ab1aa
- SHA1 ce42243cb0e997f00d2868ece16bca34862d186e
- SHA512 b933920106d6296d3401857ca7dd3df5d98f35e7b0f2488c60b23fd8b29571c7efec6f5f2b35c0077707fce87608b476048e556eaeab6c7b67916ddd13a47f29
- SSDEEP 12288:usM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQj:lV4W8hqBYgnBLfVqx1Wjke
- TLSH T1F83517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.89fa0a4b83b0c1ef61379526ac7ab1aa
- Size 1.1MB
- SHA256 d4957d893d17715d877c353beabc8802106267568c49f3991025f600bdbc6442
- MD5 89fa0a4b83b0c1ef61379526ac7ab1aa
- SHA1 ce42243cb0e997f00d2868ece16bca34862d186e
- SHA512 b933920106d6296d3401857ca7dd3df5d98f35e7b0f2488c60b23fd8b29571c7efec6f5f2b35c0077707fce87608b476048e556eaeab6c7b67916ddd13a47f29
- SSDEEP 12288:usM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQj:lV4W8hqBYgnBLfVqx1Wjke
- TLSH T1F83517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1