General
- Target jaffacakes118_Trojan.Win32.FakeAV.qajh.9f350e11dffec6f71459d354fe9181a4
- Size 2.3MB
- Sample261018-yayvmstygv
- SHA256 ecf5437700571643bac95fa8b8e700d596bac7e1c4a285931828b56926ddba71
- MD5 9f350e11dffec6f71459d354fe9181a4
- SHA1 c3cc8f40534e86eb0034b77e13e1e8d5ea49eb02
- SHA512 51f512521afc1b34c575765e9225c55afa9a11ca34bd6e771eb77cf943e789453addb599d2893b3371fdbb441f9e47480026aa8a7d5a82628d0da09cfba73e20
- SSDEEP 49152:sTN2HuX4XKzgnrJSw5MR2bIB+6DdZ55Pz6Pz6Pz6PzhPz6Pz6Pz6Pz6Pz6PzrnMs:sPIXxrJSwE2UZDr6r6r6rhr6r6r6r6rg
- TLSH T1E3B522165B11DC59C2982670C8C3C7F44AA1ED526C314F2B27F6BB8FBC362C5BA460A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.FakeAV.qajh.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.FakeAV.qajh.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.FakeAV.qajh.9f350e11dffec6f71459d354fe9181a4
- Size 2.3MB
- SHA256 ecf5437700571643bac95fa8b8e700d596bac7e1c4a285931828b56926ddba71
- MD5 9f350e11dffec6f71459d354fe9181a4
- SHA1 c3cc8f40534e86eb0034b77e13e1e8d5ea49eb02
- SHA512 51f512521afc1b34c575765e9225c55afa9a11ca34bd6e771eb77cf943e789453addb599d2893b3371fdbb441f9e47480026aa8a7d5a82628d0da09cfba73e20
- SSDEEP 49152:sTN2HuX4XKzgnrJSw5MR2bIB+6DdZ55Pz6Pz6Pz6PzhPz6Pz6Pz6Pz6Pz6PzrnMs:sPIXxrJSwE2UZDr6r6r6rhr6r6r6r6rg
- TLSH T1E3B522165B11DC59C2982670C8C3C7F44AA1ED526C314F2B27F6BB8FBC362C5BA460A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.