General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.d201b74bc093b05f974f5b7b54aa8bd7
- Size 1.1MB
- Sample261014-ghvphsgt91
- SHA256 5a46b4f2ac608ec75ea1d2b22973b5d4278ff3ffca4ad743cf8a3e47d3befb9d
- MD5 d201b74bc093b05f974f5b7b54aa8bd7
- SHA1 c35de6043314fa610e25b577cb50b358f9e29c61
- SHA512 923b56adc4db5520aed18319b29cdbe3e5327b2a040e1e56336c18642c05719520ce4a212f41bf3dc5e09e652672de13662005b3439544899d7c0facc06f2eda
- SSDEEP 12288:/sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQ6TQ:EV4W8hqBYgnBLfVqx1WjkHc
- TLSH T1673517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.d201b74bc093b05f974f5b7b54aa8bd7
- Size 1.1MB
- SHA256 5a46b4f2ac608ec75ea1d2b22973b5d4278ff3ffca4ad743cf8a3e47d3befb9d
- MD5 d201b74bc093b05f974f5b7b54aa8bd7
- SHA1 c35de6043314fa610e25b577cb50b358f9e29c61
- SHA512 923b56adc4db5520aed18319b29cdbe3e5327b2a040e1e56336c18642c05719520ce4a212f41bf3dc5e09e652672de13662005b3439544899d7c0facc06f2eda
- SSDEEP 12288:/sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQ6TQ:EV4W8hqBYgnBLfVqx1WjkHc
- TLSH T1673517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1