General
- Target jaffacakes118_Worm.Win32.Juched.fkf.c392ca494500f6f745078
- Size 316KB
- Sample261018-tf3cssgs2s
- SHA256 49271352e40f41eb21105da066a371c77b2492370401054c69edd33683f8b5f8
- MD5 b3df2862e57c392ca494500f6f745078
- SHA1 4bd47cfc8cfa08854897eedae65757ffbe584fb2
- SHA512 65f1be6746de836f25b25e938d7851eeae6e1bd5eaf361c55820562ce3809bfc12d66db4235bc873c7dbb65463d43879678afa64ea2096d7e2abbd2bf28140bf
- SSDEEP 3072:wVHgCc4xGvbwcU9KQ2BBAHmaPxiVohb5EBgY3+W:NCc4xGxWKQ2Bonxaf+W
- TLSH T19F646C21E301C02BE8D140FED6A78B79B5AC6F301B5820D793E07AE9673A1E5BD3155B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_Worm.Win32.Juched.fkf.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Worm.Win32.Juched.fkf.c392ca494500f6f745078
- Size 316KB
- SHA256 49271352e40f41eb21105da066a371c77b2492370401054c69edd33683f8b5f8
- MD5 b3df2862e57c392ca494500f6f745078
- SHA1 4bd47cfc8cfa08854897eedae65757ffbe584fb2
- SHA512 65f1be6746de836f25b25e938d7851eeae6e1bd5eaf361c55820562ce3809bfc12d66db4235bc873c7dbb65463d43879678afa64ea2096d7e2abbd2bf28140bf
- SSDEEP 3072:wVHgCc4xGvbwcU9KQ2BBAHmaPxiVohb5EBgY3+W:NCc4xGxWKQ2Bonxaf+W
- TLSH T19F646C21E301C02BE8D140FED6A78B79B5AC6F301B5820D793E07AE9673A1E5BD3155B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Duptwux
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE