General
-
Target
0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118
-
Size
450KB
-
Sample
240625-ym2gassbmm
-
MD5
0f54af2eb4f2fe2288964d4c86ba3b2b
-
SHA1
3acd41e2cf37512319bce127a2f033e04e261242
-
SHA256
913ebc4dc55802714c4f110e1630d990e5318deded8496dbcdc2225c23354fc3
-
SHA512
3adbe256d306e2b4246a986c04a1e961a476803c7d30433e9030377a94f871403a0529b72d9366f5ff8ee81f631bbd5c3345cea0e2c29043f574f07cb41a306a
-
SSDEEP
12288:/j9E1EkI9EglDFCoINhC/PwHpFzcSQQFyIBkiqiXMRC:/5E1B8lpp0hqYHpZcSQQiiPXL
Static task
static1
Behavioral task
behavioral1
Sample
0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
0f54af2eb4f2fe2288964d4c86ba3b2b_JaffaCakes118
-
Size
450KB
-
MD5
0f54af2eb4f2fe2288964d4c86ba3b2b
-
SHA1
3acd41e2cf37512319bce127a2f033e04e261242
-
SHA256
913ebc4dc55802714c4f110e1630d990e5318deded8496dbcdc2225c23354fc3
-
SHA512
3adbe256d306e2b4246a986c04a1e961a476803c7d30433e9030377a94f871403a0529b72d9366f5ff8ee81f631bbd5c3345cea0e2c29043f574f07cb41a306a
-
SSDEEP
12288:/j9E1EkI9EglDFCoINhC/PwHpFzcSQQFyIBkiqiXMRC:/5E1B8lpp0hqYHpZcSQQiiPXL
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-