General
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.dd407e1f12fc0d790bf24761af6191f7
- Size 288KB
- Sample261014-jbf9nafb46
- SHA256 5a0268537f8a6e45bc5127911e53b9d7364fbff3c2cd08ba418d004b172203d7
- MD5 dd407e1f12fc0d790bf24761af6191f7
- SHA1 02469c817841efe6d734f5cdfc6e598f772a023b
- SHA512 8d59e38c477dd0a7082fb219d6b4480c5f0f53655caa334c34d3eb0f704d0f309f66fab0e02cd935e27e1dbf595dface1e784d5d0edfe366662832b8d4ab208b
- SSDEEP 6144:Ju2urzh9xu/XkauL5J9SOIY56ae1EooRg/b3i:Jutrzh9xOXkFSOIYgaYoRgT3i
- TLSH T15E54E29233C24067F6415A3036B7D73D6A76BC2C13905E97B758078B39FB2E1EA0561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_HEUR.Trojan.Win32.Generic.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_HEUR.Trojan.Win32.Generic.dd407e1f12fc0d790bf24761af6191f7
- Size 288KB
- SHA256 5a0268537f8a6e45bc5127911e53b9d7364fbff3c2cd08ba418d004b172203d7
- MD5 dd407e1f12fc0d790bf24761af6191f7
- SHA1 02469c817841efe6d734f5cdfc6e598f772a023b
- SHA512 8d59e38c477dd0a7082fb219d6b4480c5f0f53655caa334c34d3eb0f704d0f309f66fab0e02cd935e27e1dbf595dface1e784d5d0edfe366662832b8d4ab208b
- SSDEEP 6144:Ju2urzh9xu/XkauL5J9SOIY56ae1EooRg/b3i:Jutrzh9xOXkFSOIYgaYoRgT3i
- TLSH T15E54E29233C24067F6415A3036B7D73D6A76BC2C13905E97B758078B39FB2E1EA0561B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory