General
- Target jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e
- Size 128KB
- Sample261014-qs8tkagd52
- SHA256 d4a85af9fa0581eb188855a9afd79ed66ac9a14ef1554afedb6766eca4b012af
- MD5 355873cf9214ff6dfdf1a24848059c9e
- SHA1 b866b1058a560d3b94c963da1722a520155d8904
- SHA512 beba9ab8a776ce4ea4bbab4cd3b3e5da4bc06c192490ebc7b612e73dfdd1103daa4e7f6736679086edc2f2e50bbbe4e65d8e6ae3ef42317ebfc1e21bec69058e
- SSDEEP 1536:w4RonnP0hjtM00so4pzEACaRBLAoVH1lOQYJ6iibQRVNNhK5a5aeSNg2w4DewJAz:HRo0ZeNso4pzwsHh1hbaEdEA
- TLSH T172D3F622A291EA7AC55587F01E294794953AFC3105D69E13F3C1BB397AB2E93D732303
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Worm.Win32.WBNA.yjh.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Worm.Win32.WBNA.yjh.355873cf9214ff6dfdf1a24848059c9e
- Size 128KB
- SHA256 d4a85af9fa0581eb188855a9afd79ed66ac9a14ef1554afedb6766eca4b012af
- MD5 355873cf9214ff6dfdf1a24848059c9e
- SHA1 b866b1058a560d3b94c963da1722a520155d8904
- SHA512 beba9ab8a776ce4ea4bbab4cd3b3e5da4bc06c192490ebc7b612e73dfdd1103daa4e7f6736679086edc2f2e50bbbe4e65d8e6ae3ef42317ebfc1e21bec69058e
- SSDEEP 1536:w4RonnP0hjtM00so4pzEACaRBLAoVH1lOQYJ6iibQRVNNhK5a5aeSNg2w4DewJAz:HRo0ZeNso4pzwsHh1hbaEdEA
- TLSH T172D3F622A291EA7AC55587F01E294794953AFC3105D69E13F3C1BB397AB2E93D732303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.