General
- Target jaffacakes118_Trojan.Win32.Inject.lczp.40cb4d8fdadd0db748c5549e9e1b526d
- Size 5.6MB
- Sample261018-vg8rmsgx2v
- SHA256 8ae7d04f36ed22da9569e2b651ef773dbdc295d3f3f5abe3832848ea94c82c73
- MD5 40cb4d8fdadd0db748c5549e9e1b526d
- SHA1 22291ead00b1125c6d918559ab5ae6975e77771e
- SHA512 23d53e0237ed47f943598596fd7f0e59f083277b285a148deda8f1d04528c295ad08a0b4f75f8b5f1cee53fcae3a1f1274ab6b997ad130e42c6491ca4da36449
- SSDEEP 98304:4aq7NpeVqREzLS1FdRueOA9UiiJChvQ+fJcQOASRkHLLFJ8V:4tje1LwTQeOAJiJGvvDOAVMV
- TLSH T1394633426B43C5FDDC405BF43C677F6129A17F201039C2472B8A6B263EBB867B6A64D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lczp.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lczp.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lczp.40cb4d8fdadd0db748c5549e9e1b526d
- Size 5.6MB
- SHA256 8ae7d04f36ed22da9569e2b651ef773dbdc295d3f3f5abe3832848ea94c82c73
- MD5 40cb4d8fdadd0db748c5549e9e1b526d
- SHA1 22291ead00b1125c6d918559ab5ae6975e77771e
- SHA512 23d53e0237ed47f943598596fd7f0e59f083277b285a148deda8f1d04528c295ad08a0b4f75f8b5f1cee53fcae3a1f1274ab6b997ad130e42c6491ca4da36449
- SSDEEP 98304:4aq7NpeVqREzLS1FdRueOA9UiiJChvQ+fJcQOASRkHLLFJ8V:4tje1LwTQeOAJiJGvvDOAVMV
- TLSH T1394633426B43C5FDDC405BF43C677F6129A17F201039C2472B8A6B263EBB867B6A64D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext