General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.bf6e9e5fcdfdc268aee6802b2d371db6
- Size 1.1MB
- Sample261015-2walqaev6m
- SHA256 6247fe0c3552b7d30e30ab4dc8c3dca7c5b4a3b1708af7c742af6f3a96f46e6f
- MD5 bf6e9e5fcdfdc268aee6802b2d371db6
- SHA1 1f44df9fb1ad61af449e3d61022730042aa1143d
- SHA512 5221445db38ed4da537b53f3941adf8785ed1af8277870c75230366e3e88e7c4da8f23bf862799ad15a13cca6225dfa4e2478bbf96dc09ffdf7088b2d4f86bf2
- SSDEEP 12288:nsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQS:sV4W8hqBYgnBLfVqx1Wjk/
- TLSH T18F3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.bf6e9e5fcdfdc268aee6802b2d371db6
- Size 1.1MB
- SHA256 6247fe0c3552b7d30e30ab4dc8c3dca7c5b4a3b1708af7c742af6f3a96f46e6f
- MD5 bf6e9e5fcdfdc268aee6802b2d371db6
- SHA1 1f44df9fb1ad61af449e3d61022730042aa1143d
- SHA512 5221445db38ed4da537b53f3941adf8785ed1af8277870c75230366e3e88e7c4da8f23bf862799ad15a13cca6225dfa4e2478bbf96dc09ffdf7088b2d4f86bf2
- SSDEEP 12288:nsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQS:sV4W8hqBYgnBLfVqx1Wjk/
- TLSH T18F3517316AC18031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B65A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1