General
-
Target
236ebd65d56c477add2210c7f4f6093a_JaffaCakes118
-
Size
442KB
-
Sample
240329-qyrr8shg5w
-
MD5
236ebd65d56c477add2210c7f4f6093a
-
SHA1
e47a22f5f827dc6fe731d79f8398fd4cf767549d
-
SHA256
e6d7d26167f78672061260e3a519265f38b3b9392379908bd268bf4521a048c8
-
SHA512
2f85d821934de5d264b534220bb401f21afaa57f56339ef7d4a00098ff128dd8e780e8bb439a59466b1447b66e965cbf9c5a76192f9d00ef98735e9bf6564540
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMl:rKf1PyKa2H3hOHOHz9JQ6zBa
Behavioral task
behavioral1
Sample
236ebd65d56c477add2210c7f4f6093a_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.165
218.54.31.226
Targets
-
-
Target
236ebd65d56c477add2210c7f4f6093a_JaffaCakes118
-
Size
442KB
-
MD5
236ebd65d56c477add2210c7f4f6093a
-
SHA1
e47a22f5f827dc6fe731d79f8398fd4cf767549d
-
SHA256
e6d7d26167f78672061260e3a519265f38b3b9392379908bd268bf4521a048c8
-
SHA512
2f85d821934de5d264b534220bb401f21afaa57f56339ef7d4a00098ff128dd8e780e8bb439a59466b1447b66e965cbf9c5a76192f9d00ef98735e9bf6564540
-
SSDEEP
6144:oo3wBi+1Py3V0a2WkRNgi3caOHO5NjEwwiYWB5mV4Pzw9ygibGGMl:rKf1PyKa2H3hOHOHz9JQ6zBa
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-