General
- Target jaffacakes118_Trojan.Win32.Cnopa.em.748c7e2883a5cda850896b866e4e3e9e
- Size 873KB
- Sample261018-2e8geswtcs
- SHA256 d56a514ea1f08de98b8ae58726f6fd61a163509557f1debeb84fce68bc473ba4
- MD5 748c7e2883a5cda850896b866e4e3e9e
- SHA1 75ab7e790bc14b772f60558d1572bf956af53bd4
- SHA512 32a23bdb9174d748a1ba8d0d32554cea9cb411d1cd7202f8dc0f694a2f22954e8616fd711fb21b019d630e2c4a505dec0b416fbc17e28ac2bf00817cc134cc97
- SSDEEP 12288:TtWr+uECFnvXmnES1DyAvYHgBTPAE15qBFNZ6IJdJaT/xnmF:HsvmnJuAvYABTPB15QIc2jp4
- TLSH T1F015CF28340A1105D2E5C8376623C9D5DF1C1D9F1BA2EAE51E4A057D36EED22BDF0E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Cnopa.em.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Cnopa.em.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Cnopa.em.748c7e2883a5cda850896b866e4e3e9e
- Size 873KB
- SHA256 d56a514ea1f08de98b8ae58726f6fd61a163509557f1debeb84fce68bc473ba4
- MD5 748c7e2883a5cda850896b866e4e3e9e
- SHA1 75ab7e790bc14b772f60558d1572bf956af53bd4
- SHA512 32a23bdb9174d748a1ba8d0d32554cea9cb411d1cd7202f8dc0f694a2f22954e8616fd711fb21b019d630e2c4a505dec0b416fbc17e28ac2bf00817cc134cc97
- SSDEEP 12288:TtWr+uECFnvXmnES1DyAvYHgBTPAE15qBFNZ6IJdJaT/xnmF:HsvmnJuAvYABTPB15QIc2jp4
- TLSH T1F015CF28340A1105D2E5C8376623C9D5DF1C1D9F1BA2EAE51E4A057D36EED22BDF0E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE