General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8a9d6b28f4fb73d2105519c9384a4317
- Size 1.1MB
- Sample261014-gdpygawy2p
- SHA256 1c89be543b296d83ad5b5569e63cfcf0ee20cf12834efd455cf860c048866d4d
- MD5 8a9d6b28f4fb73d2105519c9384a4317
- SHA1 fec219cd7d4ae97831f8a0f4be98f98b590eae50
- SHA512 403f638179c2ec9744dd54a06a0c7a73bb2b1d8a96f2e5189814f6d0e6d2244bf977da20511966727b7c0ffb97783159c26fffe3d8e021ce3c9edf1ed6504553
- SSDEEP 12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3
- TLSH T1FD3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.8a9d6b28f4fb73d2105519c9384a4317
- Size 1.1MB
- SHA256 1c89be543b296d83ad5b5569e63cfcf0ee20cf12834efd455cf860c048866d4d
- MD5 8a9d6b28f4fb73d2105519c9384a4317
- SHA1 fec219cd7d4ae97831f8a0f4be98f98b590eae50
- SHA512 403f638179c2ec9744dd54a06a0c7a73bb2b1d8a96f2e5189814f6d0e6d2244bf977da20511966727b7c0ffb97783159c26fffe3d8e021ce3c9edf1ed6504553
- SSDEEP 12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3
- TLSH T1FD3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1