General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.bd0af18f29bce0a000eb0b200995d95f
- Size 1.1MB
- Sample261014-gfhbeaef73
- SHA256 c6b85387de4326c19ce4552102922a684d08fd59cc4322954e894b7e8d1dd0a2
- MD5 bd0af18f29bce0a000eb0b200995d95f
- SHA1 8206a97e16450b42fc3f1e85f15256e3c8fb058e
- SHA512 34353fa0c9b791e6ef47a0176fcb16e43b383cf91efa6432dfcb6b07dee4aa41e5ce97289c359f04ef7c8d5995191658e8f5e1b2335827110cc26bba0f566276
- SSDEEP 12288:esM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQzl:1V4W8hqBYgnBLfVqx1WjkOl
- TLSH T1E63517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.bd0af18f29bce0a000eb0b200995d95f
- Size 1.1MB
- SHA256 c6b85387de4326c19ce4552102922a684d08fd59cc4322954e894b7e8d1dd0a2
- MD5 bd0af18f29bce0a000eb0b200995d95f
- SHA1 8206a97e16450b42fc3f1e85f15256e3c8fb058e
- SHA512 34353fa0c9b791e6ef47a0176fcb16e43b383cf91efa6432dfcb6b07dee4aa41e5ce97289c359f04ef7c8d5995191658e8f5e1b2335827110cc26bba0f566276
- SSDEEP 12288:esM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQzl:1V4W8hqBYgnBLfVqx1WjkOl
- TLSH T1E63517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1