General
-
Target
fe0853b6050b9d3d2da4690795a7195a_JaffaCakes118
-
Size
1.2MB
-
Sample
240421-a4lkeaed64
-
MD5
fe0853b6050b9d3d2da4690795a7195a
-
SHA1
81362a6e039ee6d5d98d3f16712fcab4eeb72252
-
SHA256
a591dd2af7fe32f64dff9eb75e8efb07dcd4d38030bd8d4a9c26a1b5d8e75783
-
SHA512
d67c588cab99606e296be81bb1c539ffc8d7843b9e9ef6c2d733e4ecf8f5a4ae2b6c9fbacd26ef8738ec08ca58ebe5f0b4786661be22cecb8904300229bb88b7
-
SSDEEP
24576:6GibqfCftT6orE/aETJ0Qb2O7s6T76t4Y/tZE:6R3HrEym0vOo6TOtRZE
Behavioral task
behavioral1
Sample
fe0853b6050b9d3d2da4690795a7195a_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
fe0853b6050b9d3d2da4690795a7195a_JaffaCakes118
-
Size
1.2MB
-
MD5
fe0853b6050b9d3d2da4690795a7195a
-
SHA1
81362a6e039ee6d5d98d3f16712fcab4eeb72252
-
SHA256
a591dd2af7fe32f64dff9eb75e8efb07dcd4d38030bd8d4a9c26a1b5d8e75783
-
SHA512
d67c588cab99606e296be81bb1c539ffc8d7843b9e9ef6c2d733e4ecf8f5a4ae2b6c9fbacd26ef8738ec08ca58ebe5f0b4786661be22cecb8904300229bb88b7
-
SSDEEP
24576:6GibqfCftT6orE/aETJ0Qb2O7s6T76t4Y/tZE:6R3HrEym0vOo6TOtRZE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-