General
-
Target
3bdcb1d115cae19ece1818cf857c838c_JaffaCakes118
-
Size
59KB
-
Sample
240712-d7dwhsxbnl
-
MD5
3bdcb1d115cae19ece1818cf857c838c
-
SHA1
d5def669b4379a6076e55582cb61ae90f0a8bee1
-
SHA256
27fc491e00d6926032b5a09034b973b7124c9c97e81f44783e9d840197f9b210
-
SHA512
84b80d7e761fd2b01f89bbfc5699212f32c7defb5d382e10d97ca36d569c04924a3a4ca619465cf64729a8ff987007841a1551de0cc918579a9b321aebda193c
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPE:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5
Static task
static1
Behavioral task
behavioral1
Sample
3bdcb1d115cae19ece1818cf857c838c_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
3bdcb1d115cae19ece1818cf857c838c_JaffaCakes118
-
Size
59KB
-
MD5
3bdcb1d115cae19ece1818cf857c838c
-
SHA1
d5def669b4379a6076e55582cb61ae90f0a8bee1
-
SHA256
27fc491e00d6926032b5a09034b973b7124c9c97e81f44783e9d840197f9b210
-
SHA512
84b80d7e761fd2b01f89bbfc5699212f32c7defb5d382e10d97ca36d569c04924a3a4ca619465cf64729a8ff987007841a1551de0cc918579a9b321aebda193c
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPE:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd5
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-