General
-
Target
1d2bd3085140b6785574212041ea086d_JaffaCakes118
-
Size
494KB
-
Sample
240702-a778kstfkm
-
MD5
1d2bd3085140b6785574212041ea086d
-
SHA1
b917601bf1feec81d510ca206dce239567a6610c
-
SHA256
280e3b80bc3c6c9ea3ca4fbb22e72dfbde1c52d78d45561e034dd23cd6d8c89e
-
SHA512
9ea5193a8924250e4b0e4c9d961bc43d2691d108c801d0fedd0d60bd65df0872c37e8b82582273072aa0847bfac4eb8169ff5e08dd0b7c3b68c0cc4f73a2e4ca
-
SSDEEP
6144:NKLOgsgomKLEFESGz0SPpeEPkPDPrzgtRY5RdrHc13FG9ItU6GvPwU:AOgwmisETzuaeDPvjJ81VGqK6GvP5
Behavioral task
behavioral1
Sample
1d2bd3085140b6785574212041ea086d_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
1d2bd3085140b6785574212041ea086d_JaffaCakes118
-
Size
494KB
-
MD5
1d2bd3085140b6785574212041ea086d
-
SHA1
b917601bf1feec81d510ca206dce239567a6610c
-
SHA256
280e3b80bc3c6c9ea3ca4fbb22e72dfbde1c52d78d45561e034dd23cd6d8c89e
-
SHA512
9ea5193a8924250e4b0e4c9d961bc43d2691d108c801d0fedd0d60bd65df0872c37e8b82582273072aa0847bfac4eb8169ff5e08dd0b7c3b68c0cc4f73a2e4ca
-
SSDEEP
6144:NKLOgsgomKLEFESGz0SPpeEPkPDPrzgtRY5RdrHc13FG9ItU6GvPwU:AOgwmisETzuaeDPvjJ81VGqK6GvP5
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-