General
- Target jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
- Size 5.1MB
- Sample261018-vmkxrsstcs
- SHA256 e25079698c9c77a6c98cc6d63569ec207f3f11e750eff41dbb6715263ffe58ae
- MD5 c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
- SHA1 2f9622c870a78e2c47c44185c11e1a81adab06f0
- SHA512 48b93887420b87cb120e474a49a3d81aeb1639342038b143c46a2eb5b5c6e5113fe34789248cd31b92f42f4adea3956679c9d1670daf2f0c85266d0ccae7f103
- SSDEEP 98304:Oe6f9x24SDaR7R0st7tmiFcNh7ZopCiOKJlHo3Yrr6RItt5r/bbOUNaXbJgbcOl:SFk4SDaR7R0stZmzNhyDJZo3YX2Wt5rF
- TLSH T1653633CCF395C420C89615B62D09F37925BFAF3A7330A9828B9F6C630D526D6541CAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.ldxd.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.ldxd.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.ldxd.c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
- Size 5.1MB
- SHA256 e25079698c9c77a6c98cc6d63569ec207f3f11e750eff41dbb6715263ffe58ae
- MD5 c1d91a5c46c7b1a1e8e26e6fcdbe3fdf
- SHA1 2f9622c870a78e2c47c44185c11e1a81adab06f0
- SHA512 48b93887420b87cb120e474a49a3d81aeb1639342038b143c46a2eb5b5c6e5113fe34789248cd31b92f42f4adea3956679c9d1670daf2f0c85266d0ccae7f103
- SSDEEP 98304:Oe6f9x24SDaR7R0st7tmiFcNh7ZopCiOKJlHo3Yrr6RItt5r/bbOUNaXbJgbcOl:SFk4SDaR7R0stZmzNhyDJZo3YX2Wt5rF
- TLSH T1653633CCF395C420C89615B62D09F37925BFAF3A7330A9828B9F6C630D526D6541CAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Suspicious use of SetThreadContext