General
-
Target
2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118
-
Size
168KB
-
Sample
240708-gns3waxerb
-
MD5
2b38a2d7de7de647a99cc5fae2ea0d2a
-
SHA1
b64522853d584a0471096d2debdfd73a5cd69efe
-
SHA256
c6f7e1f660dd5e7464b1421aff8c77b4a67a6e1dbaaedb739b03e41d9dff8f60
-
SHA512
c201f8f310a14026f6c3d34a7b94a945be215e81729d6d66a94c11c1c76e56fc356536b7991c9458477ec2ba413e43245f1f78f448da564923b2df20ccf6d997
-
SSDEEP
1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfe:eADA0Wc7UJ6LZMaHLW65DE8pxW2
Behavioral task
behavioral1
Sample
2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
2b38a2d7de7de647a99cc5fae2ea0d2a_JaffaCakes118
-
Size
168KB
-
MD5
2b38a2d7de7de647a99cc5fae2ea0d2a
-
SHA1
b64522853d584a0471096d2debdfd73a5cd69efe
-
SHA256
c6f7e1f660dd5e7464b1421aff8c77b4a67a6e1dbaaedb739b03e41d9dff8f60
-
SHA512
c201f8f310a14026f6c3d34a7b94a945be215e81729d6d66a94c11c1c76e56fc356536b7991c9458477ec2ba413e43245f1f78f448da564923b2df20ccf6d997
-
SSDEEP
1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfe:eADA0Wc7UJ6LZMaHLW65DE8pxW2
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-