General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.f12c6aea519e3dc0a07dfd2b3da7e20b
- Size 1.1MB
- Sample261014-gkr2eagv21
- SHA256 4aab2df0ff0e50819f90ffb4bb0b2e1d7db1e87ccae8a5c088b5e53ec9bd04ae
- MD5 f12c6aea519e3dc0a07dfd2b3da7e20b
- SHA1 f77f1f2a31076243dab56d895dc2745ec63898d5
- SHA512 c3eac56090cf65356895bfab16c01b446f7dde7896da3e5a59f6047b18ec55d86fedc71c86254f396d53b0d3b5315024070ab2301e72f81284e9e888b25644cd
- SSDEEP 12288:HsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQyE:MV4W8hqBYgnBLfVqx1WjkfE
- TLSH T15D3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.f12c6aea519e3dc0a07dfd2b3da7e20b
- Size 1.1MB
- SHA256 4aab2df0ff0e50819f90ffb4bb0b2e1d7db1e87ccae8a5c088b5e53ec9bd04ae
- MD5 f12c6aea519e3dc0a07dfd2b3da7e20b
- SHA1 f77f1f2a31076243dab56d895dc2745ec63898d5
- SHA512 c3eac56090cf65356895bfab16c01b446f7dde7896da3e5a59f6047b18ec55d86fedc71c86254f396d53b0d3b5315024070ab2301e72f81284e9e888b25644cd
- SSDEEP 12288:HsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQyE:MV4W8hqBYgnBLfVqx1WjkfE
- TLSH T15D3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1