General
- Target jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa
- Size 485KB
- Sample261014-mt8cmsbx8v
- SHA256 5fb611fa9df2068efaf3a7ac39085455a2e308a3f80360f847ce76a2e403c0ac
- MD5 0561cd9dda6dedcc9e6da843ac4638fa
- SHA1 dcad647a957c6035556f94948f203cda09698c27
- SHA512 6f8da3a5952b4b9275c571911a9666b62b4d9d3a767a537e8e9270d71038b313935c7e030479fcda1e96b78fa0805b87a8a4b3f7f34049f43dfccf47bcbbc7a3
- SSDEEP 12288:eHcaqfk439IqLJd4ymAe/8dASYRa7GvX3cXvz/Ac:qcZfp39IqLJ0AjGPcXF
- TLSH T154B41201F784D077D8648A300DFAB174A238FC33BDA4A65E2B51759D2DB4691AC36F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.VBKrypt.wojo.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.VBKrypt.wojo.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.VBKrypt.wojo.0561cd9dda6dedcc9e6da843ac4638fa
- Size 485KB
- SHA256 5fb611fa9df2068efaf3a7ac39085455a2e308a3f80360f847ce76a2e403c0ac
- MD5 0561cd9dda6dedcc9e6da843ac4638fa
- SHA1 dcad647a957c6035556f94948f203cda09698c27
- SHA512 6f8da3a5952b4b9275c571911a9666b62b4d9d3a767a537e8e9270d71038b313935c7e030479fcda1e96b78fa0805b87a8a4b3f7f34049f43dfccf47bcbbc7a3
- SSDEEP 12288:eHcaqfk439IqLJd4ymAe/8dASYRa7GvX3cXvz/Ac:qcZfp39IqLJ0AjGPcXF
- TLSH T154B41201F784D077D8648A300DFAB174A238FC33BDA4A65E2B51759D2DB4691AC36F2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext