General
- Target jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1
- Size 120KB
- Sample261018-zgp2ravvbx
- SHA256 02d9cc17506a8a73dea9da85f61c0265c0092ba8acb757cee1beb0c027596237
- MD5 fd4e304d00a0448741d6e49dbdcddff1
- SHA1 148421004b8661e443709bd62a3363592ee3ed80
- SHA512 7a3e39625ac72953cead3bd1f4907081ffe7376f693d2b026aac0c58dc5d942a3575917b27e4a649608644ec8f8295b5fbb25523e66b46eef7266b1027c64391
- SSDEEP 3072:h0CbZSukOY8hrJFVNM/N/5sfqDfwqpeG5:Sork6hrJ3NON/5sG9t
- TLSH T16CC3A32A77A1E23EC625CAF42D4A43B0907DAD3521D2AD17F7C21B16B2F1D6BD221713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan.Win32.Diple.epdi.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan.Win32.Diple.epdi.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan.Win32.Diple.epdi.fd4e304d00a0448741d6e49dbdcddff1
- Size 120KB
- SHA256 02d9cc17506a8a73dea9da85f61c0265c0092ba8acb757cee1beb0c027596237
- MD5 fd4e304d00a0448741d6e49dbdcddff1
- SHA1 148421004b8661e443709bd62a3363592ee3ed80
- SHA512 7a3e39625ac72953cead3bd1f4907081ffe7376f693d2b026aac0c58dc5d942a3575917b27e4a649608644ec8f8295b5fbb25523e66b46eef7266b1027c64391
- SSDEEP 3072:h0CbZSukOY8hrJFVNM/N/5sfqDfwqpeG5:Sork6hrJ3NON/5sG9t
- TLSH T16CC3A32A77A1E23EC625CAF42D4A43B0907DAD3521D2AD17F7C21B16B2F1D6BD221713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2