General
-
Target
0fc8ba6de4099ddc991eade9b86a6f06_JaffaCakes118
-
Size
438KB
-
Sample
240328-zrx54sgd5w
-
MD5
0fc8ba6de4099ddc991eade9b86a6f06
-
SHA1
7b723301027c1c6979561bc60b2be47d481c7c17
-
SHA256
c0658b1c3245fdf7c34d69afd2962131243c6b615f53b0a0c85635ddbc15497a
-
SHA512
8c1ee3032cae73f91d162f37daeaec265e2478495df90626737c48fc523ff8e3383ba6cf5ddfafab24ecf134a816ca167ac3a9535ccfd3059e8374c6a27c17df
-
SSDEEP
6144:jn1XcyLxXJLpp+g4E9lubahTKXGLFBh4j9dA0SvKLhf+2lHnBCw0qt:RvxRflMGTuIbKJdA0SvKLflHnBzN
Static task
static1
Behavioral task
behavioral1
Sample
0fc8ba6de4099ddc991eade9b86a6f06_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0fc8ba6de4099ddc991eade9b86a6f06_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gcleaner
ggg-cl.biz
45.9.20.13
Targets
-
-
Target
0fc8ba6de4099ddc991eade9b86a6f06_JaffaCakes118
-
Size
438KB
-
MD5
0fc8ba6de4099ddc991eade9b86a6f06
-
SHA1
7b723301027c1c6979561bc60b2be47d481c7c17
-
SHA256
c0658b1c3245fdf7c34d69afd2962131243c6b615f53b0a0c85635ddbc15497a
-
SHA512
8c1ee3032cae73f91d162f37daeaec265e2478495df90626737c48fc523ff8e3383ba6cf5ddfafab24ecf134a816ca167ac3a9535ccfd3059e8374c6a27c17df
-
SSDEEP
6144:jn1XcyLxXJLpp+g4E9lubahTKXGLFBh4j9dA0SvKLhf+2lHnBCw0qt:RvxRflMGTuIbKJdA0SvKLflHnBzN
Score10/10-
OnlyLogger payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-