General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8a9d6b28f4fb73d2105519c9384a4317
- Size 1.1MB
- Sample261014-gdpygawy2p
- SHA256 1c89be543b296d83ad5b5569e63cfcf0ee20cf12834efd455cf860c048866d4d
- MD5 8a9d6b28f4fb73d2105519c9384a4317
- SHA1 fec219cd7d4ae97831f8a0f4be98f98b590eae50
- SHA512 403f638179c2ec9744dd54a06a0c7a73bb2b1d8a96f2e5189814f6d0e6d2244bf977da20511966727b7c0ffb97783159c26fffe3d8e021ce3c9edf1ed6504553
- SSDEEP 12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3
- TLSH T1FD3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8a9d6b28f4fb73d2105519c9384a4317
- Size 1.1MB
- SHA256 1c89be543b296d83ad5b5569e63cfcf0ee20cf12834efd455cf860c048866d4d
- MD5 8a9d6b28f4fb73d2105519c9384a4317
- SHA1 fec219cd7d4ae97831f8a0f4be98f98b590eae50
- SHA512 403f638179c2ec9744dd54a06a0c7a73bb2b1d8a96f2e5189814f6d0e6d2244bf977da20511966727b7c0ffb97783159c26fffe3d8e021ce3c9edf1ed6504553
- SSDEEP 12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3
- TLSH T1FD3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1