General
- Target jaffacakes118_Trojan.Win32.Inject.lhka.e0e5b673ab0d84a2291a0eab986fa394
- Size 4.8MB
- Sample261018-vmvf7szz8j
- SHA256 ae31b216db8ee10ce697dda9008bcfb0ba0d4bc813d8cb97d75ae026bd61400b
- MD5 e0e5b673ab0d84a2291a0eab986fa394
- SHA1 16f69e78c0f7a3c56de84e62cd5510b30d21d5bc
- SHA512 af05963eb53e1b4e80b43c98dff0307399022b08d5d6a17a1c5a5dc4bba38f3a683e6c4e2f2eee0fa09b8fcc5fd90f7c0518424e069c039da86a7607915c43cb
- SSDEEP 98304:j2J/Fd+usR8uwf/yyGmtgjQOGZhbfJxs4Tj01Clp9ScuTwj9L92JFs+:j2JvOeHf2jofvbTj0gXScuTwj9ByFs+
- TLSH T15136337AF68F52F1D8822130D7745F7AA0787E93C8A4674B6BCCBD057E61146610BC3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Inject.lhka.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Inject.lhka.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Inject.lhka.e0e5b673ab0d84a2291a0eab986fa394
- Size 4.8MB
- SHA256 ae31b216db8ee10ce697dda9008bcfb0ba0d4bc813d8cb97d75ae026bd61400b
- MD5 e0e5b673ab0d84a2291a0eab986fa394
- SHA1 16f69e78c0f7a3c56de84e62cd5510b30d21d5bc
- SHA512 af05963eb53e1b4e80b43c98dff0307399022b08d5d6a17a1c5a5dc4bba38f3a683e6c4e2f2eee0fa09b8fcc5fd90f7c0518424e069c039da86a7607915c43cb
- SSDEEP 98304:j2J/Fd+usR8uwf/yyGmtgjQOGZhbfJxs4Tj01Clp9ScuTwj9L92JFs+:j2JvOeHf2jofvbTj0gXScuTwj9ByFs+
- TLSH T15136337AF68F52F1D8822130D7745F7AA0787E93C8A4674B6BCCBD057E61146610BC3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Suspicious use of SetThreadContext