General
- Target jaffacakes118_Trojan.Win32.Inject.lcnr.3027bf9e690e1bb01bc24ff059479362
- Size 5.2MB
- Sample261018-vbv9cszy7l
- SHA256 3233a929206b4d2821918463da3f9eb0e9b76cf8e760644288d0b8bfd205d0b5
- MD5 3027bf9e690e1bb01bc24ff059479362
- SHA1 a70da0e035be57c04da004183c57c08671844407
- SHA512 be78d9ec423beb7db3939f5b6d427abf058aa2e2d26c069534d1c3591f77b14ed4c9fc250f501c62864e57da3704148f28252d9769e1fd676473cd9d8b1315fa
- SSDEEP 98304:xgEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChbk:x9bO9QxurIoAyBw5G45WiYKEqZA
- TLSH T1B3463324F4A290BEC844043CB5D8376785ACFF613A46F6A2B7201C859EFC1A6FF16579
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcnr.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcnr.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcnr.3027bf9e690e1bb01bc24ff059479362
- Size 5.2MB
- SHA256 3233a929206b4d2821918463da3f9eb0e9b76cf8e760644288d0b8bfd205d0b5
- MD5 3027bf9e690e1bb01bc24ff059479362
- SHA1 a70da0e035be57c04da004183c57c08671844407
- SHA512 be78d9ec423beb7db3939f5b6d427abf058aa2e2d26c069534d1c3591f77b14ed4c9fc250f501c62864e57da3704148f28252d9769e1fd676473cd9d8b1315fa
- SSDEEP 98304:xgEbfd85Ewz8V3xug+XGxoWh03BhS5by45mWd0DrrGYaZ9HE7+UChbk:x9bO9QxurIoAyBw5G45WiYKEqZA
- TLSH T1B3463324F4A290BEC844043CB5D8376785ACFF613A46F6A2B7201C859EFC1A6FF16579
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext