General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.346c43886c2c2b4c3dcc92779c4f8ad3
- Size 1.1MB
- Sample261015-2vsqxaev6l
- SHA256 c96e50ca3147480b7f1e384f735e2470f30297b64a772ab0f0940f58c8a92453
- MD5 346c43886c2c2b4c3dcc92779c4f8ad3
- SHA1 dc50cd487831fd227ecd879d96408f5c23211cab
- SHA512 0232ce0587359851d0b08435fbbd8d42ada692ec4098a206329b92e6e47eeaf23e49ae19d8258001f4a6221177c9d658a125298e0e157f328eb03bcba21504d3
- SSDEEP 12288:+sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQT:VV4W8hqBYgnBLfVqx1Wjku
- TLSH T1A23517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.346c43886c2c2b4c3dcc92779c4f8ad3
- Size 1.1MB
- SHA256 c96e50ca3147480b7f1e384f735e2470f30297b64a772ab0f0940f58c8a92453
- MD5 346c43886c2c2b4c3dcc92779c4f8ad3
- SHA1 dc50cd487831fd227ecd879d96408f5c23211cab
- SHA512 0232ce0587359851d0b08435fbbd8d42ada692ec4098a206329b92e6e47eeaf23e49ae19d8258001f4a6221177c9d658a125298e0e157f328eb03bcba21504d3
- SSDEEP 12288:+sM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQT:VV4W8hqBYgnBLfVqx1Wjku
- TLSH T1A23517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1