General
- Target jaffacakes118_Trojan.Win32.Agent.qwgixc.8c706c03e02b996cb2083812eb380377
- Size 1.0MB
- Sample261015-29pb2aef66
- SHA256 1955b63fc79e1a8e6aea3ddb00bc57a3aa3f2ff9a6edcfb16eb5eb46efdf144e
- MD5 8c706c03e02b996cb2083812eb380377
- SHA1 d78e66492a98e03d6106e50babd19d493bb61fba
- SHA512 6ab15d355a8c21fdf656d8356f47133420ec173e7eff0fc58c32e113b86939608a910849625cc0e2a525936586c5f8f3da2bf5a466789943230c2832ba34f06d
- SSDEEP 12288:yPxo8jVvb1vs0i31Oqenh/oZPFGsaA5TGzUiTV+tOEQQaefVc9v6LAoNEO:yPxo8RhXi31qnf4UfToZc6LAom
- TLSH T129358E12779080B6E4BE033494B74F3197BEB9726B758BCBA784065D1D723C0AE35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Agent.qwgixc.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Agent.qwgixc.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Agent.qwgixc.8c706c03e02b996cb2083812eb380377
- Size 1.0MB
- SHA256 1955b63fc79e1a8e6aea3ddb00bc57a3aa3f2ff9a6edcfb16eb5eb46efdf144e
- MD5 8c706c03e02b996cb2083812eb380377
- SHA1 d78e66492a98e03d6106e50babd19d493bb61fba
- SHA512 6ab15d355a8c21fdf656d8356f47133420ec173e7eff0fc58c32e113b86939608a910849625cc0e2a525936586c5f8f3da2bf5a466789943230c2832ba34f06d
- SSDEEP 12288:yPxo8jVvb1vs0i31Oqenh/oZPFGsaA5TGzUiTV+tOEQQaefVc9v6LAoNEO:yPxo8RhXi31qnf4UfToZc6LAom
- TLSH T129358E12779080B6E4BE033494B74F3197BEB9726B758BCBA784065D1D723C0AE35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL