General
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.ff53472350b90c51858b8d7d26160dd3
- Size 1.1MB
- Sample261018-tskcrabg36
- SHA256 413f3e3986c89dfe335156e33bc59200f60a8e4b07571c6874c1ce2cdaa67548
- MD5 ff53472350b90c51858b8d7d26160dd3
- SHA1 a50176a49d1e46a5ee35ddd0f5a3bd2abf684286
- SHA512 dc2d3be62e52d4f99a507179abc954eb1e97e77a4496248e4d59849d40d013009deaed6fb4dfb5ab07e447c4caf1672e583d80b88804a229defa795c730bb8cc
- SSDEEP 12288:nsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQS:sV4W8hqBYgnBLfVqx1Wjk/
- TLSH T18A3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.RiskTool.Win32.Agent.bahf.ff53472350b90c51858b8d7d26160dd3
- Size 1.1MB
- SHA256 413f3e3986c89dfe335156e33bc59200f60a8e4b07571c6874c1ce2cdaa67548
- MD5 ff53472350b90c51858b8d7d26160dd3
- SHA1 a50176a49d1e46a5ee35ddd0f5a3bd2abf684286
- SHA512 dc2d3be62e52d4f99a507179abc954eb1e97e77a4496248e4d59849d40d013009deaed6fb4dfb5ab07e447c4caf1672e583d80b88804a229defa795c730bb8cc
- SSDEEP 12288:nsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQS:sV4W8hqBYgnBLfVqx1Wjk/
- TLSH T18A3517316AC19031D3123331CE14EEEE356A6DB40DDA955FE2A43B394BB41B2DD3B61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1