General
- Target jaffacakes118_Trojan.Win32.Cnopa.ff.87b8040bafd54d42127e171f3dbc1b68
- Size 888KB
- Sample261018-2fb5lsch57
- SHA256 295f03c08c9a02aeacda3a80b1ca2b5885a7038359eb806d6ea3e34126f9bcf8
- MD5 87b8040bafd54d42127e171f3dbc1b68
- SHA1 7cb22eb849ba248aaeb8579a172215b01fea0f83
- SHA512 114123d5ce39e378a204dfc3ef7b85d9871b8f886ea9c62d0cf61befefdf641ce7425cbac31b05b69863e6ca95c23fe1bb35d858cfd3e19222f27af45ef753ee
- SSDEEP 12288:SNWr+uECFnvXmnES1DyAvYHgBTPAE15qBFNZ6IJdJaT/xqt:KsvmnJuAvYABTPB15QIc2jEt
- TLSH T12615CF28340E1105D2E5C8376623C9D1DE2D1D9F1792EAE51E4A057D36EEE22BDF0E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Cnopa.ff.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Cnopa.ff.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Cnopa.ff.87b8040bafd54d42127e171f3dbc1b68
- Size 888KB
- SHA256 295f03c08c9a02aeacda3a80b1ca2b5885a7038359eb806d6ea3e34126f9bcf8
- MD5 87b8040bafd54d42127e171f3dbc1b68
- SHA1 7cb22eb849ba248aaeb8579a172215b01fea0f83
- SHA512 114123d5ce39e378a204dfc3ef7b85d9871b8f886ea9c62d0cf61befefdf641ce7425cbac31b05b69863e6ca95c23fe1bb35d858cfd3e19222f27af45ef753ee
- SSDEEP 12288:SNWr+uECFnvXmnES1DyAvYHgBTPAE15qBFNZ6IJdJaT/xqt:KsvmnJuAvYABTPB15QIc2jEt
- TLSH T12615CF28340E1105D2E5C8376623C9D1DE2D1D9F1792EAE51E4A057D36EEE22BDF0E2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE