General
- Target jaffacakes118_Trojan.MSIL.Crypt.gevu.378b54c22eb48b8fbe616088e8ab5bb0
- Size 328KB
- Sample261016-dy3hhswwcs
- SHA256 cb8a7764ccd67b44d6befc551bbcf5d98223c03266a59102c8cf8cb3134edd63
- MD5 378b54c22eb48b8fbe616088e8ab5bb0
- SHA1 d3b8e6f89440fa8a9880d7e76f128ab483a93c95
- SHA512 87896bc40f0de2b3327b2f8fd3cfec98b838c044227b974d176d8d43c5459694cbba1bf38f367d83f9cfa365dbb9d11d5922f29c995e5789d40dca99775c7e9a
- SSDEEP 6144:BTUfpfmRnAlP5R10C8IKfStM72Luk9e3oGhKOQhoTFPytFewikC2x:BoRDx5kPnfv7kuk9e9KOPT5CFe8Dx
- TLSH T12C64136AB783E00ED6054A79D4B2E4C943384D138147B55B0ECC7F6DBDB3A91ABC2539
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.MSIL.Crypt.gevu.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.MSIL.Crypt.gevu.378b54c22eb48b8fbe616088e8ab5bb0
- Size 328KB
- SHA256 cb8a7764ccd67b44d6befc551bbcf5d98223c03266a59102c8cf8cb3134edd63
- MD5 378b54c22eb48b8fbe616088e8ab5bb0
- SHA1 d3b8e6f89440fa8a9880d7e76f128ab483a93c95
- SHA512 87896bc40f0de2b3327b2f8fd3cfec98b838c044227b974d176d8d43c5459694cbba1bf38f367d83f9cfa365dbb9d11d5922f29c995e5789d40dca99775c7e9a
- SSDEEP 6144:BTUfpfmRnAlP5R10C8IKfStM72Luk9e3oGhKOQhoTFPytFewikC2x:BoRDx5kPnfv7kuk9e9KOPT5CFe8Dx
- TLSH T12C64136AB783E00ED6054A79D4B2E4C943384D138147B55B0ECC7F6DBDB3A91ABC2539
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops desktop.ini file(s)