General
- Target jaffacakes118_Trojan.Win32.Agent.qwjctl.85ecdc8c30649159102d04bf549cf1a9
- Size 848KB
- Sample261015-3kam1sys8p
- SHA256 5611ebe7c1fa758a26c82a9932707548bfdd8c6cbaebba77c500ba79f356c478
- MD5 85ecdc8c30649159102d04bf549cf1a9
- SHA1 604ec56baba8c18cf9bc4467127fc7d25295e8c4
- SHA512 451f592c66f7aed84860ca746b73161510629add104388e66405137bfcbe7c9489bda6ad28988a92ce940a43c09a85b6566c15b91f1b85c73463f6e806415523
- SSDEEP 24576:0cgCYQ1LGum4sx8Kofd/uV+w3q77Mk7fGJUB:LgCh1LGumhuW+0q7LzGiB
- TLSH T135052300B9A5AAB2E829483100AB8746973FFCA9D9A483177FC9F96FDC703505F53D16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Agent.qwjctl.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Agent.qwjctl.85ecdc8c30649159102d04bf549cf1a9
- Size 848KB
- SHA256 5611ebe7c1fa758a26c82a9932707548bfdd8c6cbaebba77c500ba79f356c478
- MD5 85ecdc8c30649159102d04bf549cf1a9
- SHA1 604ec56baba8c18cf9bc4467127fc7d25295e8c4
- SHA512 451f592c66f7aed84860ca746b73161510629add104388e66405137bfcbe7c9489bda6ad28988a92ce940a43c09a85b6566c15b91f1b85c73463f6e806415523
- SSDEEP 24576:0cgCYQ1LGum4sx8Kofd/uV+w3q77Mk7fGJUB:LgCh1LGumhuW+0q7LzGiB
- TLSH T135052300B9A5AAB2E829483100AB8746973FFCA9D9A483177FC9F96FDC703505F53D16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory