General
- Target jaffacakes118_Worm.Win32.Vobfus.dgjr.394b852089fe23b6e72623ca9dd3beae
- Size 152KB
- Sample261018-tgxhyaew7p
- SHA256 d15f646601724c9639446153c474aee56c72a47c37588fd21cb1a00b818d77e1
- MD5 394b852089fe23b6e72623ca9dd3beae
- SHA1 715f1ac13ca8d75c08cdd440cb87b8dcfb440503
- SHA512 3199b6361bb3b2f9f8f16417d9f53821d661065b9595b36f10edd3b2189a1d9cbdba51110736ef5655b0aa923119d45209b3d163ec26d4811806ccae2b754a05
- SSDEEP 3072:T3KIpK9xKA9w2p4QZisLaazNiIIkyyqN4oQZiE9Fl:T3ZpKxY+1isuazgfklcW7z
- TLSH T1C0E3932E7691F23AD414CAF83D1982A0A07DEC3625D16C17F7C26B1A77F1DA79220B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Worm.Win32.Vobfus.dgjr.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Worm.Win32.Vobfus.dgjr.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Worm.Win32.Vobfus.dgjr.394b852089fe23b6e72623ca9dd3beae
- Size 152KB
- SHA256 d15f646601724c9639446153c474aee56c72a47c37588fd21cb1a00b818d77e1
- MD5 394b852089fe23b6e72623ca9dd3beae
- SHA1 715f1ac13ca8d75c08cdd440cb87b8dcfb440503
- SHA512 3199b6361bb3b2f9f8f16417d9f53821d661065b9595b36f10edd3b2189a1d9cbdba51110736ef5655b0aa923119d45209b3d163ec26d4811806ccae2b754a05
- SSDEEP 3072:T3KIpK9xKA9w2p4QZisLaazNiIIkyyqN4oQZiE9Fl:T3ZpKxY+1isuazgfklcW7z
- TLSH T1C0E3932E7691F23AD414CAF83D1982A0A07DEC3625D16C17F7C26B1A77F1DA79220B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2