General
-
Target
1c4f9ab1b4226ce6e308662f208aab6b_JaffaCakes118
-
Size
463KB
-
Sample
240701-yqb1tazgrr
-
MD5
1c4f9ab1b4226ce6e308662f208aab6b
-
SHA1
1ad72fd01dbb77dec2ec764acc4bfd1f9da6eab0
-
SHA256
8d6f452ae1f250035af51fdc1e21fd6c7691a64cf2e19726062715eb17390fbf
-
SHA512
06be07be62cb8d68049a73a654a3576ca8c59f977119a8f3ecec13e5967c235cec6d335c548d2a23b54146b186c4a655c8e2c3b16c5d7ea239ac07dced76ce1c
-
SSDEEP
12288:Y6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UL:Y6tQCG0UUPzEkTn4AC1+s
Behavioral task
behavioral1
Sample
1c4f9ab1b4226ce6e308662f208aab6b_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
Targets
-
-
Target
1c4f9ab1b4226ce6e308662f208aab6b_JaffaCakes118
-
Size
463KB
-
MD5
1c4f9ab1b4226ce6e308662f208aab6b
-
SHA1
1ad72fd01dbb77dec2ec764acc4bfd1f9da6eab0
-
SHA256
8d6f452ae1f250035af51fdc1e21fd6c7691a64cf2e19726062715eb17390fbf
-
SHA512
06be07be62cb8d68049a73a654a3576ca8c59f977119a8f3ecec13e5967c235cec6d335c548d2a23b54146b186c4a655c8e2c3b16c5d7ea239ac07dced76ce1c
-
SSDEEP
12288:Y6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UL:Y6tQCG0UUPzEkTn4AC1+s
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-