General
-
Target
23735f69905e775dea99756cfe86f421_JaffaCakes118
-
Size
240KB
-
Sample
240329-qzakcaad88
-
MD5
23735f69905e775dea99756cfe86f421
-
SHA1
7ece328ffcc339597e90e133cb8f5e5fb9f8884c
-
SHA256
98d422b40ed6a98bc48b1ddb9f90c2f121b39489fd0a96fadfc09173d43de2fe
-
SHA512
fc7e3ef8831ae6bfdf443a1f14d643dc45ae6c423188a63cd03271b6ce0323c6eb7fc8285b11992208d77f8518852f6b512e44688aef6e31c4a5f9c4f307bb06
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik
Behavioral task
behavioral1
Sample
23735f69905e775dea99756cfe86f421_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
23735f69905e775dea99756cfe86f421_JaffaCakes118
-
Size
240KB
-
MD5
23735f69905e775dea99756cfe86f421
-
SHA1
7ece328ffcc339597e90e133cb8f5e5fb9f8884c
-
SHA256
98d422b40ed6a98bc48b1ddb9f90c2f121b39489fd0a96fadfc09173d43de2fe
-
SHA512
fc7e3ef8831ae6bfdf443a1f14d643dc45ae6c423188a63cd03271b6ce0323c6eb7fc8285b11992208d77f8518852f6b512e44688aef6e31c4a5f9c4f307bb06
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2k:ZASpvo0LKkRzpxJ2kRqroik
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-