General
- Target jaffacakes118_Trojan.Win32.Buzus.gzue.7c0228381f07a1c16d67c98c69512342
- Size 72KB
- Sample261018-3lencsav6k
- SHA256 7f906e7d421f9aef3f4a2edffde1507f916f7b1ff84c49dfbe7f7749091af564
- MD5 7c0228381f07a1c16d67c98c69512342
- SHA1 49b939c63f8e1c909c46ba1bc08900da81b3b865
- SHA512 21b00220e626f02cd8a39ab23ea12565a0165556a806f836f7ab5a99ee9b8a34e80f5ac280e4599cde12048dc41979e8f3895b36e60a9347f1e62fbf9fa38963
- SSDEEP 768:PbcfdQAB0/601ARtO4SYjWwuDmYJbLSjmtpUD477t3eu4iaTUOGbFAA48jSES+Vf:EaAe/ATOSjWTDmALSCPPt2KFA8jQIz
- TLSH T17B739E1E736CA4B7F16D81B5C842D47854693C363A8D8C4BE24FBB592DB8804B6B072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Buzus.gzue.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Buzus.gzue.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Buzus.gzue.7c0228381f07a1c16d67c98c69512342
- Size 72KB
- SHA256 7f906e7d421f9aef3f4a2edffde1507f916f7b1ff84c49dfbe7f7749091af564
- MD5 7c0228381f07a1c16d67c98c69512342
- SHA1 49b939c63f8e1c909c46ba1bc08900da81b3b865
- SHA512 21b00220e626f02cd8a39ab23ea12565a0165556a806f836f7ab5a99ee9b8a34e80f5ac280e4599cde12048dc41979e8f3895b36e60a9347f1e62fbf9fa38963
- SSDEEP 768:PbcfdQAB0/601ARtO4SYjWwuDmYJbLSjmtpUD477t3eu4iaTUOGbFAA48jSES+Vf:EaAe/ATOSjWTDmALSCPPt2KFA8jQIz
- TLSH T17B739E1E736CA4B7F16D81B5C842D47854693C363A8D8C4BE24FBB592DB8804B6B072B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext