General
- Target 0074fb6623785c44ec0d2231572c6fc7_JaffaCakes118
- Size 84KB
- Sample240328-jbcapsfd8w
- SHA256 62f271a12cb97afd0488b1be73b8b473c0f2d1af3c4f5ff6d9dcb719360cc0af
- MD5 0074fb6623785c44ec0d2231572c6fc7
- SHA1 6c5140b7d5cb0d0a139ac6ab712b3d544cfd6ddc
- SHA512 06ec23eabbbb119aa94bdeb8526acabf10b7c76da5556635eb3533fc42500bde0b1f9ce81388736af625bf97861438100d4a9ef8a7aac8159abf85d62579ebff
- SSDEEP 1536:mLPFBK011PXLkv8pW+8xGpqv+7CS6pKtPuKO+3:49BBhgoJq27j68tPue
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
0074fb6623785c44ec0d2231572c6fc7_JaffaCakes118.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 0074fb6623785c44ec0d2231572c6fc7_JaffaCakes118
- Size 84KB
- SHA256 62f271a12cb97afd0488b1be73b8b473c0f2d1af3c4f5ff6d9dcb719360cc0af
- MD5 0074fb6623785c44ec0d2231572c6fc7
- SHA1 6c5140b7d5cb0d0a139ac6ab712b3d544cfd6ddc
- SHA512 06ec23eabbbb119aa94bdeb8526acabf10b7c76da5556635eb3533fc42500bde0b1f9ce81388736af625bf97861438100d4a9ef8a7aac8159abf85d62579ebff
- SSDEEP 1536:mLPFBK011PXLkv8pW+8xGpqv+7CS6pKtPuKO+3:49BBhgoJq27j68tPue
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL