General
- Target jaffacakes118_Trojan.Win32.Inject.lcxk.27602ab1f41c1fc22841dab5b3c5a730
- Size 5.6MB
- Sample261018-vgf2mae18p
- SHA256 7b0858555f134886f4c15ec80bb843d1a8ebc7551d8d946b66c4aaa649133d25
- MD5 27602ab1f41c1fc22841dab5b3c5a730
- SHA1 8c90a748f296dabb6e0655141c721426f8548127
- SHA512 de287e0b2f89fac8ed0aa5e1cb4f9d6ed79918941e82c92567ff7763cfdbddbefb0fb7c4a4e9fe5c8c1a54f1af05e0e377240edbed59305a578bcae3689de477
- SSDEEP 98304:4aq7NpeVqREzLS1FdRueOA9UiiJChvQ+fJcQOASRkHLLFJ8G:4tje1LwTQeOAJiJGvvDOAVMG
- TLSH T1E54633426B43C5FDDC405BF43C577F6229A17F201039C2472B8A6B263EBB867B6A64D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lcxk.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lcxk.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lcxk.27602ab1f41c1fc22841dab5b3c5a730
- Size 5.6MB
- SHA256 7b0858555f134886f4c15ec80bb843d1a8ebc7551d8d946b66c4aaa649133d25
- MD5 27602ab1f41c1fc22841dab5b3c5a730
- SHA1 8c90a748f296dabb6e0655141c721426f8548127
- SHA512 de287e0b2f89fac8ed0aa5e1cb4f9d6ed79918941e82c92567ff7763cfdbddbefb0fb7c4a4e9fe5c8c1a54f1af05e0e377240edbed59305a578bcae3689de477
- SSDEEP 98304:4aq7NpeVqREzLS1FdRueOA9UiiJChvQ+fJcQOASRkHLLFJ8G:4tje1LwTQeOAJiJGvvDOAVMG
- TLSH T1E54633426B43C5FDDC405BF43C577F6229A17F201039C2472B8A6B263EBB867B6A64D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext