General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.232c27886fdbcc6625b9ecf315800ae0
- Size 1.1MB
- Sample261015-2vm6esttb1
- SHA256 0fd000629bcec858006a6b254bdd66498658f2fa654c0ab7dbcc9a8b92ba27ad
- MD5 232c27886fdbcc6625b9ecf315800ae0
- SHA1 a97f182058a8def806a2b15b5cf54fe13cfb8921
- SHA512 05d3a00688891f459b520b9606580d74a51d08deacd3c1a64e3d72d0dead2201ffdfa518321535c10ff013055a21f3d1fc99940006fd8a4501a3a35621177518
- SSDEEP 12288:OsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQD:FV4W8hqBYgnBLfVqx1Wjk+
- TLSH T13C3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.232c27886fdbcc6625b9ecf315800ae0
- Size 1.1MB
- SHA256 0fd000629bcec858006a6b254bdd66498658f2fa654c0ab7dbcc9a8b92ba27ad
- MD5 232c27886fdbcc6625b9ecf315800ae0
- SHA1 a97f182058a8def806a2b15b5cf54fe13cfb8921
- SHA512 05d3a00688891f459b520b9606580d74a51d08deacd3c1a64e3d72d0dead2201ffdfa518321535c10ff013055a21f3d1fc99940006fd8a4501a3a35621177518
- SSDEEP 12288:OsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQD:FV4W8hqBYgnBLfVqx1Wjk+
- TLSH T13C3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1