General
- Target jaffacakes118_Trojan.Win32.Inject.lcuj.0ba7b015d3452e39e558b87cca83ab13
- Size 5.6MB
- Sample261018-vffpgassds
- SHA256 3b8754d704257f95253954ed688bea60791480c801517ef6bc51bbd0817c97d2
- MD5 0ba7b015d3452e39e558b87cca83ab13
- SHA1 f42288ef59c852b0b2a1a176810c1f7c11d74bf8
- SHA512 b9bbfa0eeea6e28642d96aca8bd330597fe3dcf49be9c280b27d7e5d438e65b95089912b16ea6feb9d92eb04651fb399414ed521617d1867286ec8c1c9c32bf0
- SSDEEP 98304:DsmlBY9D5j8/FGQgy6RQR+xuJ0fVcB5OVCBLG5HzydKMOsrJC:AmXY/j1QWGRIDdcB5OV5Rzydm5
- TLSH T1A7463325FB8BC4B6E0A30838559941F8A9AACF70A3003D1FAB307E653C74991B5DD5F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcuj.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcuj.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcuj.0ba7b015d3452e39e558b87cca83ab13
- Size 5.6MB
- SHA256 3b8754d704257f95253954ed688bea60791480c801517ef6bc51bbd0817c97d2
- MD5 0ba7b015d3452e39e558b87cca83ab13
- SHA1 f42288ef59c852b0b2a1a176810c1f7c11d74bf8
- SHA512 b9bbfa0eeea6e28642d96aca8bd330597fe3dcf49be9c280b27d7e5d438e65b95089912b16ea6feb9d92eb04651fb399414ed521617d1867286ec8c1c9c32bf0
- SSDEEP 98304:DsmlBY9D5j8/FGQgy6RQR+xuJ0fVcB5OVCBLG5HzydKMOsrJC:AmXY/j1QWGRIDdcB5OV5Rzydm5
- TLSH T1A7463325FB8BC4B6E0A30838559941F8A9AACF70A3003D1FAB307E653C74991B5DD5F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext