General
- Target jaffacakes118_Trojan.Win32.Agent.qwhagm.ce018e86529afc0cc7a4ceede15a294f
- Size 193KB
- Sample261015-3bqb4sys5l
- SHA256 7e4cd05a4d1c05fca356edee5c02059f3fda282f4e39ffc399860e5e1f549dfb
- MD5 ce018e86529afc0cc7a4ceede15a294f
- SHA1 3aba71fc85e796257d835a88fe525f70dc8d4ca1
- SHA512 c0383cfd9983e42d1dcba91ab19d583192bf63fbd8439e66509e0e6057820a27dc1098b9cb879ada6e7c3965da20f516d8b5894969cdf25c7efbe31ab4062e55
- SSDEEP 6144:Ib7zYttwENm2eK7mnoUSgpAY8ODcDcm7cIsnK24xHCVYrRwrztasTLAO3+w:IbOuV4xdATLN+
- TLSH T18B148D2174D2C473D1B305305DE4C7B5AABDB9320B6A8EAB77A41B2D4E740E2C631EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Agent.qwhagm.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Agent.qwhagm.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Agent.qwhagm.ce018e86529afc0cc7a4ceede15a294f
- Size 193KB
- SHA256 7e4cd05a4d1c05fca356edee5c02059f3fda282f4e39ffc399860e5e1f549dfb
- MD5 ce018e86529afc0cc7a4ceede15a294f
- SHA1 3aba71fc85e796257d835a88fe525f70dc8d4ca1
- SHA512 c0383cfd9983e42d1dcba91ab19d583192bf63fbd8439e66509e0e6057820a27dc1098b9cb879ada6e7c3965da20f516d8b5894969cdf25c7efbe31ab4062e55
- SSDEEP 6144:Ib7zYttwENm2eK7mnoUSgpAY8ODcDcm7cIsnK24xHCVYrRwrztasTLAO3+w:IbOuV4xdATLN+
- TLSH T18B148D2174D2C473D1B305305DE4C7B5AABDB9320B6A8EAB77A41B2D4E740E2C631EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.