General
- Target jaffacakes118_Trojan.Win32.Inject.lcno.31e85802d4761442d4d0b5b586b02ec4
- Size 5.5MB
- Sample261018-vbqzmsgw4w
- SHA256 69a3e3dbd6cde6bee6786fa321eeeea6d59fe1b129424601d89078c753995cf2
- MD5 31e85802d4761442d4d0b5b586b02ec4
- SHA1 1122d1d138c0475d6ea1dd7713929255173b3457
- SHA512 3d4e24176bc557d54216f560246afd1565e048fb81efef02b7b7f53a7a93f643a733ee657069485b37c8e04ce704668205994f6c77a8e13d6e3e1d51a5343c25
- SSDEEP 98304:ugEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChrQdo:u9bO9QxurIoAyBw5G45WiYKEq5Udo
- TLSH T172463319F5E2C0BEC444153CB0D867B6856DAE717946F1E7B3203C84AEFC2A2EE25539
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcno.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcno.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcno.31e85802d4761442d4d0b5b586b02ec4
- Size 5.5MB
- SHA256 69a3e3dbd6cde6bee6786fa321eeeea6d59fe1b129424601d89078c753995cf2
- MD5 31e85802d4761442d4d0b5b586b02ec4
- SHA1 1122d1d138c0475d6ea1dd7713929255173b3457
- SHA512 3d4e24176bc557d54216f560246afd1565e048fb81efef02b7b7f53a7a93f643a733ee657069485b37c8e04ce704668205994f6c77a8e13d6e3e1d51a5343c25
- SSDEEP 98304:ugEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChrQdo:u9bO9QxurIoAyBw5G45WiYKEq5Udo
- TLSH T172463319F5E2C0BEC444153CB0D867B6856DAE717946F1E7B3203C84AEFC2A2EE25539
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext