General
-
Target
536ebd0dd4c4c5a181218e8feb50c11e_JaffaCakes118
-
Size
468KB
-
Sample
240717-r1jp3sveqk
-
MD5
536ebd0dd4c4c5a181218e8feb50c11e
-
SHA1
2d4dbeaf96eb5c8c649c7aa6e443199d29f15d43
-
SHA256
a1f2acea98a82d1c7f15d10f584e23233a777921a89e767d60846b49136daafd
-
SHA512
fac9d69c74dd4976fcb05bbce6e4f29cc0abac89a833546e65a61e5958660c45e777aa38f220262701dea6c52ec30cb3a42904640c72dbfaeed51d424d11d553
-
SSDEEP
12288:m6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UFM:m6tQCG0UUPzEkTn4AC1+l
Behavioral task
behavioral1
Sample
536ebd0dd4c4c5a181218e8feb50c11e_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
Targets
-
-
Target
536ebd0dd4c4c5a181218e8feb50c11e_JaffaCakes118
-
Size
468KB
-
MD5
536ebd0dd4c4c5a181218e8feb50c11e
-
SHA1
2d4dbeaf96eb5c8c649c7aa6e443199d29f15d43
-
SHA256
a1f2acea98a82d1c7f15d10f584e23233a777921a89e767d60846b49136daafd
-
SHA512
fac9d69c74dd4976fcb05bbce6e4f29cc0abac89a833546e65a61e5958660c45e777aa38f220262701dea6c52ec30cb3a42904640c72dbfaeed51d424d11d553
-
SSDEEP
12288:m6twjLHj/8/GcHUIdPPzEmvTnabAh0ZnAr1UFM:m6tQCG0UUPzEkTn4AC1+l
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-