General
- Target jaffacakes118_Trojan.Win32.Cosmu.vwm.28abeae99f268260bd188d8de5986e91
- Size 2.5MB
- Sample261018-2pebbstw8m
- SHA256 7e3b2d1cfb294c27aa8582d88d1c18bb4312db50e83557e078c2d8b22e2e5b3f
- MD5 28abeae99f268260bd188d8de5986e91
- SHA1 4181a4dfaffdbc9e9ac9dca8f3347cdb805123e3
- SHA512 646a65f1c53f2bf01ee106e6d204168ff9ca4a0afabcac9bbc3f97c356a151e48bd21ffa6287b1dec553f1222b794e2849a1889533214783c4f0030163aaf3ee
- SSDEEP 49152:tDYcMjYcMysGnprwkqbM/sZibpg28YIr07F2jYgH:1505YGdwkqbM/k8r8VsFwx
- TLSH T1B7C56C11E38680F2E973067003A6A7BB4B31AF365521C9DFE698DD1C7EB35C16A28357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Cosmu.vwm.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Cosmu.vwm.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Cosmu.vwm.28abeae99f268260bd188d8de5986e91
- Size 2.5MB
- SHA256 7e3b2d1cfb294c27aa8582d88d1c18bb4312db50e83557e078c2d8b22e2e5b3f
- MD5 28abeae99f268260bd188d8de5986e91
- SHA1 4181a4dfaffdbc9e9ac9dca8f3347cdb805123e3
- SHA512 646a65f1c53f2bf01ee106e6d204168ff9ca4a0afabcac9bbc3f97c356a151e48bd21ffa6287b1dec553f1222b794e2849a1889533214783c4f0030163aaf3ee
- SSDEEP 49152:tDYcMjYcMysGnprwkqbM/sZibpg28YIr07F2jYgH:1505YGdwkqbM/k8r8VsFwx
- TLSH T1B7C56C11E38680F2E973067003A6A7BB4B31AF365521C9DFE698DD1C7EB35C16A28357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE