General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.f33c6abdf15b3b8739ee27e14f4fc667
- Size 1.1MB
- Sample261014-glcm4swz2l
- SHA256 27e6df3ff0fff65d09d0fa7647e0942e3b096ae8609a781bea0782018fd8f58c
- MD5 f33c6abdf15b3b8739ee27e14f4fc667
- SHA1 7efd39c22441364ef5b7517d6281e006a8ac7d3b
- SHA512 88931b87a74000b236ac6c3439ccc7470ef936bba5f6b7cfe2decae77defa9a3ed2e7e591a3788808c345ad6612bd23906e785b4e09521d59c1db3b9c07db14f
- SSDEEP 12288:WsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQ7:tV4W8hqBYgnBLfVqx1Wjk2
- TLSH T1BE3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.f33c6abdf15b3b8739ee27e14f4fc667
- Size 1.1MB
- SHA256 27e6df3ff0fff65d09d0fa7647e0942e3b096ae8609a781bea0782018fd8f58c
- MD5 f33c6abdf15b3b8739ee27e14f4fc667
- SHA1 7efd39c22441364ef5b7517d6281e006a8ac7d3b
- SHA512 88931b87a74000b236ac6c3439ccc7470ef936bba5f6b7cfe2decae77defa9a3ed2e7e591a3788808c345ad6612bd23906e785b4e09521d59c1db3b9c07db14f
- SSDEEP 12288:WsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQ7:tV4W8hqBYgnBLfVqx1Wjk2
- TLSH T1BE3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1