General
-
Target
35509ebea985026ecb4d741ee200a783_JaffaCakes118
-
Size
452KB
-
Sample
240710-sxfppavhjm
-
MD5
35509ebea985026ecb4d741ee200a783
-
SHA1
6c3e8bbb0c534cdcfefc6eaad3cac8002943d9b2
-
SHA256
d6b7378931e60173582294d361e78bbceebbf053eaacbb90719bd9de87d3d9a0
-
SHA512
2c574b4a417928ea3ebebb57fa2823ac8810f1799835f2fe816d90cf8e1d6a5a4d1f381b19a49f69698e6f656483ce5645722b5464f5e09cf516b47c23c38003
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFz:CMpASIcWYx2U6hAJQna
Behavioral task
behavioral1
Sample
35509ebea985026ecb4d741ee200a783_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
35509ebea985026ecb4d741ee200a783_JaffaCakes118
-
Size
452KB
-
MD5
35509ebea985026ecb4d741ee200a783
-
SHA1
6c3e8bbb0c534cdcfefc6eaad3cac8002943d9b2
-
SHA256
d6b7378931e60173582294d361e78bbceebbf053eaacbb90719bd9de87d3d9a0
-
SHA512
2c574b4a417928ea3ebebb57fa2823ac8810f1799835f2fe816d90cf8e1d6a5a4d1f381b19a49f69698e6f656483ce5645722b5464f5e09cf516b47c23c38003
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFz:CMpASIcWYx2U6hAJQna
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-