General
-
Target
4f1896a9c18b2cf10225c458aed8bc78_JaffaCakes118
-
Size
197KB
-
Sample
240716-tqjnfatckh
-
MD5
4f1896a9c18b2cf10225c458aed8bc78
-
SHA1
9196435304721f9d9b9a9ef4fcc986817d68cb78
-
SHA256
6dc01f45c6881b484fc059029a26d0fc0c15bc89f6444974361751d93fc837c7
-
SHA512
3bc2bef2c5ec7c79c9fc812576ad5e8c0fbe0ceda1795d106dc47a96eea907fe0c2e45a4420c0087d03424f0409987dce60fcc0ebfb188cd27d4a1d1321bda08
-
SSDEEP
1536:kUqOou3xsUK2ZM+o5RtWVszFiiDsR7ToP/7OYhVWU2gzeNHYoIeC34/PC7Ruz3hh:3yuTOfolTlYHB+HYoIe+t7R8fU6n8u
Behavioral task
behavioral1
Sample
4f1896a9c18b2cf10225c458aed8bc78_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
4f1896a9c18b2cf10225c458aed8bc78_JaffaCakes118
-
Size
197KB
-
MD5
4f1896a9c18b2cf10225c458aed8bc78
-
SHA1
9196435304721f9d9b9a9ef4fcc986817d68cb78
-
SHA256
6dc01f45c6881b484fc059029a26d0fc0c15bc89f6444974361751d93fc837c7
-
SHA512
3bc2bef2c5ec7c79c9fc812576ad5e8c0fbe0ceda1795d106dc47a96eea907fe0c2e45a4420c0087d03424f0409987dce60fcc0ebfb188cd27d4a1d1321bda08
-
SSDEEP
1536:kUqOou3xsUK2ZM+o5RtWVszFiiDsR7ToP/7OYhVWU2gzeNHYoIeC34/PC7Ruz3hh:3yuTOfolTlYHB+HYoIe+t7R8fU6n8u
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-