General
- Target jaffacakes118_Trojan.Win32.Inject.ldjo.e5df687c2cf419adac1841d14783bb02
- Size 5.6MB
- Sample261018-vjftmsfs2q
- SHA256 e4b00ff256e4c082d8b345de20752d427a0006d12f3d62b8d160dee9a28b736b
- MD5 e5df687c2cf419adac1841d14783bb02
- SHA1 a02ec706d3c2f56959a30a19353d050ef0cc400b
- SHA512 5650412e95a5d26f93892f6f0ac8c7c310c8fc5dd97a97afd8ed46bf1e66060d4085adf3e480c61c8ee8429d9ce8c40b3e865f1ea4e235452cebc017467e2e3b
- SSDEEP 98304:WgsmlBY9D5j8/FGQgy6RQR+xuJ0fVcB5OVCBLG5HzydKMOsrJG:KmXY/j1QWGRIDdcB5OV5RzydmJ
- TLSH T1B0463325FB8BC4B6F0E3083815AE4198A9BBCF7067003D1EAB3076652C74991B5DD9F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.ldjo.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.ldjo.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.ldjo.e5df687c2cf419adac1841d14783bb02
- Size 5.6MB
- SHA256 e4b00ff256e4c082d8b345de20752d427a0006d12f3d62b8d160dee9a28b736b
- MD5 e5df687c2cf419adac1841d14783bb02
- SHA1 a02ec706d3c2f56959a30a19353d050ef0cc400b
- SHA512 5650412e95a5d26f93892f6f0ac8c7c310c8fc5dd97a97afd8ed46bf1e66060d4085adf3e480c61c8ee8429d9ce8c40b3e865f1ea4e235452cebc017467e2e3b
- SSDEEP 98304:WgsmlBY9D5j8/FGQgy6RQR+xuJ0fVcB5OVCBLG5HzydKMOsrJG:KmXY/j1QWGRIDdcB5OV5RzydmJ
- TLSH T1B0463325FB8BC4B6F0E3083815AE4198A9BBCF7067003D1EAB3076652C74991B5DD9F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext