General
- Target jaffacakes118_Trojan.Win32.Buzus.mrku.fdf1ac90125ea5218ae391475ac36a90
- Size 226KB
- Sample261018-1pwpyaa12x
- SHA256 335931b7b0be1f50354b82d91c117ed6ac93601a7f3e9206b1af105c53d186e6
- MD5 fdf1ac90125ea5218ae391475ac36a90
- SHA1 4549ca0ee8f773596dd906cd7a0dc904de4848c7
- SHA512 4dba35948f5b73dcd3e5047c9ceb828f70a83c7e8d17cc59130207b09e633126c64311a7701c433262bbe87d521f7cb17a0474a7e627fe387fb0326fc34f1b8f
- SSDEEP 6144:daFaEeGH7gy6aFi2+uvFIGwgjlh0i/Tbo4:d6aJW7gLaFi2+mdLbo4
- TLSH T1A834E047BAE5483DE061CAF04C319A565E3B3D3129A15A27BB8C9E4E0C717C368F4B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Buzus.mrku.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Buzus.mrku.fdf1ac90125ea5218ae391475ac36a90
- Size 226KB
- SHA256 335931b7b0be1f50354b82d91c117ed6ac93601a7f3e9206b1af105c53d186e6
- MD5 fdf1ac90125ea5218ae391475ac36a90
- SHA1 4549ca0ee8f773596dd906cd7a0dc904de4848c7
- SHA512 4dba35948f5b73dcd3e5047c9ceb828f70a83c7e8d17cc59130207b09e633126c64311a7701c433262bbe87d521f7cb17a0474a7e627fe387fb0326fc34f1b8f
- SSDEEP 6144:daFaEeGH7gy6aFi2+uvFIGwgjlh0i/Tbo4:d6aJW7gLaFi2+mdLbo4
- TLSH T1A834E047BAE5483DE061CAF04C319A565E3B3D3129A15A27BB8C9E4E0C717C368F4B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE