General
- Target jaffacakes118_Trojan.Win32.Inject.lcll.0b0d3447ba1321b655ca56c8955dc201
- Size 5.5MB
- Sample261018-vbexdazy6p
- SHA256 8eefad5861eefe34a7cba4adeab5d6a246ae96390ea97088de001dffa49038fc
- MD5 0b0d3447ba1321b655ca56c8955dc201
- SHA1 4793033d5348e5f01826539b6a88c34079671e68
- SHA512 304919e9c407ecb357ba66d13846c7f95bc32558476852751958581f2808c0de0cd1e68178484478467814a0ed0533d121d150c70cd59e242fb27791646f6d56
- SSDEEP 98304:/gEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChrQdL:/9bO9QxurIoAyBw5G45WiYKEq5UdL
- TLSH T171463319F5E1D0BFC844153C70D82766856DAE723A46F1E6B3242C84CEFC2A6FE26539
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcll.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcll.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcll.0b0d3447ba1321b655ca56c8955dc201
- Size 5.5MB
- SHA256 8eefad5861eefe34a7cba4adeab5d6a246ae96390ea97088de001dffa49038fc
- MD5 0b0d3447ba1321b655ca56c8955dc201
- SHA1 4793033d5348e5f01826539b6a88c34079671e68
- SHA512 304919e9c407ecb357ba66d13846c7f95bc32558476852751958581f2808c0de0cd1e68178484478467814a0ed0533d121d150c70cd59e242fb27791646f6d56
- SSDEEP 98304:/gEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChrQdL:/9bO9QxurIoAyBw5G45WiYKEq5UdL
- TLSH T171463319F5E1D0BFC844153C70D82766856DAE723A46F1E6B3242C84CEFC2A6FE26539
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext