General
- Target jaffacakes118_Worm.Win32.Vobfus.dgsd.4205159cab2303a23d7282076568fc66
- Size 228KB
- Sample261015-2f8htatscs
- SHA256 dc8279a595401fc1ed362c5e1c141bc1ce81c57298d86918b1df1e4e2b70b29c
- MD5 4205159cab2303a23d7282076568fc66
- SHA1 c5c435c494e5ed6cef507921db812196226fd814
- SHA512 aa1b0cf73b1a6bbe3e50d8aa26d4675258cd6b73431527c817ad434ecaf8f9cbfedf4b3a65c371889257904f5e0d5c114dd087ba6581a1b48ab1062731d6b62f
- SSDEEP 6144:am83PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7S3:amGPhAmZIH+7O
- TLSH T13734C7677F659848F43A15F459F3C3F20696E84DCA47420B5B303A2A2EFBE461D246B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Worm.Win32.Vobfus.dgsd.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Worm.Win32.Vobfus.dgsd.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Worm.Win32.Vobfus.dgsd.4205159cab2303a23d7282076568fc66
- Size 228KB
- SHA256 dc8279a595401fc1ed362c5e1c141bc1ce81c57298d86918b1df1e4e2b70b29c
- MD5 4205159cab2303a23d7282076568fc66
- SHA1 c5c435c494e5ed6cef507921db812196226fd814
- SHA512 aa1b0cf73b1a6bbe3e50d8aa26d4675258cd6b73431527c817ad434ecaf8f9cbfedf4b3a65c371889257904f5e0d5c114dd087ba6581a1b48ab1062731d6b62f
- SSDEEP 6144:am83PFKs7aFwKWwalhrEqxF6snji81RUinKZHg/7S3:amGPhAmZIH+7O
- TLSH T13734C7677F659848F43A15F459F3C3F20696E84DCA47420B5B303A2A2EFBE461D246B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2