General
-
Target
03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118
-
Size
156KB
-
Sample
240622-vw28eazhmq
-
MD5
03210cf681bc7de73a54a5062fe7bc87
-
SHA1
14aebef1f9d5d44ea4d0e0a740ddb19e8870522d
-
SHA256
54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1
-
SHA512
6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8
-
SSDEEP
1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb
Behavioral task
behavioral1
Sample
03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
03210cf681bc7de73a54a5062fe7bc87_JaffaCakes118
-
Size
156KB
-
MD5
03210cf681bc7de73a54a5062fe7bc87
-
SHA1
14aebef1f9d5d44ea4d0e0a740ddb19e8870522d
-
SHA256
54dc254338e6a99e689c8d64063c55439c2aba4d135eeec55dc345afc2338ca1
-
SHA512
6b9a59a93783a32ec039dabaefa94bd1d671b4d42a1f14bc066330f3aea5ea86ac7c38358fc6d7beff71ad5ca17d496a6b582bf60fbed610fced56a1ec0248b8
-
SSDEEP
1536:yXZ56F5r5JZJWEtVpFqN9BBKweuVHZJ71/j+suPG0Hc18yPsWjcdWny6k04yW/Xe:yp56zRJ83+OJ7NoGvdwWy6k04yW/KNb
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-