General
-
Target
e9ec55fa475e462a1ebe69ad039f91b7_JaffaCakes118
-
Size
361KB
-
Sample
240409-n1cpzshe7v
-
MD5
e9ec55fa475e462a1ebe69ad039f91b7
-
SHA1
f30cd019e33d2ffd63677a7dd168c9014665601a
-
SHA256
027c625db67282c61bec003cefc705d805d3d83ba8ea0c0c9f55377c382e8cec
-
SHA512
f1d3e1e0c6de82be1c683e33db0ff0d5500907124c8e805b580827614bca75ccde6e6e4d25c375428e7bdbee60872f1b709f04a2a2367ebf7a24511fa0eb3cb9
-
SSDEEP
6144:6xLne5AbYOvpgY1U5vc56uhMDZCzopKPnDauBsj9UPzWCfO:6x7eSblvxycjMUopGnDkjMznf
Static task
static1
Behavioral task
behavioral1
Sample
e9ec55fa475e462a1ebe69ad039f91b7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9ec55fa475e462a1ebe69ad039f91b7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gcleaner
194.145.227.161
Targets
-
-
Target
e9ec55fa475e462a1ebe69ad039f91b7_JaffaCakes118
-
Size
361KB
-
MD5
e9ec55fa475e462a1ebe69ad039f91b7
-
SHA1
f30cd019e33d2ffd63677a7dd168c9014665601a
-
SHA256
027c625db67282c61bec003cefc705d805d3d83ba8ea0c0c9f55377c382e8cec
-
SHA512
f1d3e1e0c6de82be1c683e33db0ff0d5500907124c8e805b580827614bca75ccde6e6e4d25c375428e7bdbee60872f1b709f04a2a2367ebf7a24511fa0eb3cb9
-
SSDEEP
6144:6xLne5AbYOvpgY1U5vc56uhMDZCzopKPnDauBsj9UPzWCfO:6x7eSblvxycjMUopGnDkjMznf
Score10/10-
OnlyLogger payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-