General
- Target jaffacakes118_Trojan.Win32.Inject.lcoa.1945cb7f3632387bb1d5531eddea68db
- Size 5.2MB
- Sample261018-vb7mdse16j
- SHA256 43bd48c1b4c045d76109209c755ff042b62b2af62f640179e8056926dcbe2dce
- MD5 1945cb7f3632387bb1d5531eddea68db
- SHA1 49bda528e50b3a64252cda31a60132115886bb38
- SHA512 f1bb6a2b2aa63e7f495c0ecd63855a0151111adc2ce358a2a07a9f375b2729ada560603c1a3a6b04cb0daec9dca52404371914d4142182db093318f66efb567c
- SSDEEP 98304:KgEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChbt:K9bO9QxurIoAyBw5G45WiYKEqZB
- TLSH T120463314F4A280BEC804043CB5D8676785ACFF613A4AF692B7241C859EFC2B6FF16579
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcoa.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcoa.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcoa.1945cb7f3632387bb1d5531eddea68db
- Size 5.2MB
- SHA256 43bd48c1b4c045d76109209c755ff042b62b2af62f640179e8056926dcbe2dce
- MD5 1945cb7f3632387bb1d5531eddea68db
- SHA1 49bda528e50b3a64252cda31a60132115886bb38
- SHA512 f1bb6a2b2aa63e7f495c0ecd63855a0151111adc2ce358a2a07a9f375b2729ada560603c1a3a6b04cb0daec9dca52404371914d4142182db093318f66efb567c
- SSDEEP 98304:KgEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChbt:K9bO9QxurIoAyBw5G45WiYKEqZB
- TLSH T120463314F4A280BEC804043CB5D8676785ACFF613A4AF692B7241C859EFC2B6FF16579
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext