General
-
Target
576efec6f031aafe69b9cc1976d7a835_JaffaCakes118
-
Size
552KB
-
Sample
240718-pxy99ayepm
-
MD5
576efec6f031aafe69b9cc1976d7a835
-
SHA1
230ce86f2c586e6a8bc01885f0628a9724f4986b
-
SHA256
ae968a5ff95572001f54a79873649d860d5126e68cae205b01dfb5b5b93768b4
-
SHA512
122d06fbe59fa35deaa27840ebdecd0f3cc6b317aa070fab0a15e1c4918ef1a0ddc2e30e4ea753b8c4bacc93ef2dd7f239f7da8d9eaa32164c7fce1bfe06f8b1
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl+:+rt4/NArwjs5ol+
Behavioral task
behavioral1
Sample
576efec6f031aafe69b9cc1976d7a835_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
576efec6f031aafe69b9cc1976d7a835_JaffaCakes118
-
Size
552KB
-
MD5
576efec6f031aafe69b9cc1976d7a835
-
SHA1
230ce86f2c586e6a8bc01885f0628a9724f4986b
-
SHA256
ae968a5ff95572001f54a79873649d860d5126e68cae205b01dfb5b5b93768b4
-
SHA512
122d06fbe59fa35deaa27840ebdecd0f3cc6b317aa070fab0a15e1c4918ef1a0ddc2e30e4ea753b8c4bacc93ef2dd7f239f7da8d9eaa32164c7fce1bfe06f8b1
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzl+:+rt4/NArwjs5ol+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-