General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.53f8567363a546135d556630ade0daa0
- Size 1.1MB
- Sample261015-2vxpvsdz8w
- SHA256 6ac5fc75f1ab8f22233ad0063f464e86717c5de6c28ec906c8ed2f3ae732cdd4
- MD5 53f8567363a546135d556630ade0daa0
- SHA1 499a696302b776cd0ff1171d7b44f2205ed672e4
- SHA512 a2dd195af18de349d84923d43a5422cd96efc60a5f97243f361c386e288125632da70efb6519757c91f9fc7ad431a83628292374212b6552ce4226c0d9ab9fe4
- SSDEEP 12288:esM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQz7:1V4W8hqBYgnBLfVqx1WjkO7
- TLSH T1E73517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.53f8567363a546135d556630ade0daa0
- Size 1.1MB
- SHA256 6ac5fc75f1ab8f22233ad0063f464e86717c5de6c28ec906c8ed2f3ae732cdd4
- MD5 53f8567363a546135d556630ade0daa0
- SHA1 499a696302b776cd0ff1171d7b44f2205ed672e4
- SHA512 a2dd195af18de349d84923d43a5422cd96efc60a5f97243f361c386e288125632da70efb6519757c91f9fc7ad431a83628292374212b6552ce4226c0d9ab9fe4
- SSDEEP 12288:esM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQz7:1V4W8hqBYgnBLfVqx1WjkO7
- TLSH T1E73517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1