General
-
Target
2aa1b076332dae3c56bd097408e67ca9_JaffaCakes118
-
Size
449KB
-
Sample
240708-cnbflsxfkl
-
MD5
2aa1b076332dae3c56bd097408e67ca9
-
SHA1
767430c796b79db675cdcb18a9bb493312e405ab
-
SHA256
e2f4c0614f14eb139981dcc642573c38bb3f81f8cadfca700704fe18b4dbba25
-
SHA512
47c036da60c7261abc1ebf9f65a755d1dee3d8ad6caae63d265d89b2f4a9fd6310ab41d9c3b4140830974fd95c9ea015be52462f7265a8b155808ebec078201e
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTd:CMpASIcWYx2U6hAJQnO
Behavioral task
behavioral1
Sample
2aa1b076332dae3c56bd097408e67ca9_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
2aa1b076332dae3c56bd097408e67ca9_JaffaCakes118
-
Size
449KB
-
MD5
2aa1b076332dae3c56bd097408e67ca9
-
SHA1
767430c796b79db675cdcb18a9bb493312e405ab
-
SHA256
e2f4c0614f14eb139981dcc642573c38bb3f81f8cadfca700704fe18b4dbba25
-
SHA512
47c036da60c7261abc1ebf9f65a755d1dee3d8ad6caae63d265d89b2f4a9fd6310ab41d9c3b4140830974fd95c9ea015be52462f7265a8b155808ebec078201e
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTd:CMpASIcWYx2U6hAJQnO
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-