General
-
Target
15fdb2d27414e72354d2b61fb49f0466_JaffaCakes118
-
Size
782KB
-
Sample
240627-pkeebatcpm
-
MD5
15fdb2d27414e72354d2b61fb49f0466
-
SHA1
af2bf1ef3a845191c2aa4e153de17e7fa6d6d69f
-
SHA256
e156158712cede8be39850d649229f37be75bc43258dffa8b3c7f7879a280750
-
SHA512
f9d0dbc844a8650b18e9b2938cd3d0647db519ce0b09d1edba70c121f12229526da4d4ba0b560390bcc22403e31f1f9b502efbf5e8e9499fd7602639caf4ae17
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1Yl:YA4Ya1fQzPPSnPFqWtTJK9DIMTW89
Behavioral task
behavioral1
Sample
15fdb2d27414e72354d2b61fb49f0466_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
15fdb2d27414e72354d2b61fb49f0466_JaffaCakes118
-
Size
782KB
-
MD5
15fdb2d27414e72354d2b61fb49f0466
-
SHA1
af2bf1ef3a845191c2aa4e153de17e7fa6d6d69f
-
SHA256
e156158712cede8be39850d649229f37be75bc43258dffa8b3c7f7879a280750
-
SHA512
f9d0dbc844a8650b18e9b2938cd3d0647db519ce0b09d1edba70c121f12229526da4d4ba0b560390bcc22403e31f1f9b502efbf5e8e9499fd7602639caf4ae17
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1Yl:YA4Ya1fQzPPSnPFqWtTJK9DIMTW89
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-