General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.c8f3b1a8e8db7b4ca3f5e9b60c3b23fa
- Size 1.1MB
- Sample261014-ghbxeagy7l
- SHA256 d3ad943a5b59e1e071a3f61882d803e7879bb2bca2f632216a3f62386352e018
- MD5 c8f3b1a8e8db7b4ca3f5e9b60c3b23fa
- SHA1 7137b6c99d7bc7afa4bb73e1efe0b0bc3165ac5f
- SHA512 3de4b90a6a9f28837283e0e2863207868f55cc9d01b49d62251f6ac56e1683799079436455c624f45656806c120c04cd014812d16512f055c1c7a903e34376d6
- SSDEEP 12288:wsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQlq:LV4W8hqBYgnBLfVqx1Wjksq
- TLSH T10B3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.c8f3b1a8e8db7b4ca3f5e9b60c3b23fa
- Size 1.1MB
- SHA256 d3ad943a5b59e1e071a3f61882d803e7879bb2bca2f632216a3f62386352e018
- MD5 c8f3b1a8e8db7b4ca3f5e9b60c3b23fa
- SHA1 7137b6c99d7bc7afa4bb73e1efe0b0bc3165ac5f
- SHA512 3de4b90a6a9f28837283e0e2863207868f55cc9d01b49d62251f6ac56e1683799079436455c624f45656806c120c04cd014812d16512f055c1c7a903e34376d6
- SSDEEP 12288:wsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQlq:LV4W8hqBYgnBLfVqx1Wjksq
- TLSH T10B3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1