General
-
Target
68bd360f6d2f75b8a456432a7f4b6181_JaffaCakes118
-
Size
448KB
-
Sample
240723-ywg41svgqq
-
MD5
68bd360f6d2f75b8a456432a7f4b6181
-
SHA1
71af916f5949fb3b9f78ddb445bd870df3ba9070
-
SHA256
98d6667c8078bc4e80b02010bfa3b63372f4eadf0134b24f818363bac21315e3
-
SHA512
024c8094ba3260c2d2e24aba33bf158306700a06c87bb095d616715b4957fa0e40c9d978712b8f211c47c64a1762d9c2886f9eac134a01cb77ba22a079b90044
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoh:PMpASIcWYx2U6hAJQn1
Behavioral task
behavioral1
Sample
68bd360f6d2f75b8a456432a7f4b6181_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
68bd360f6d2f75b8a456432a7f4b6181_JaffaCakes118
-
Size
448KB
-
MD5
68bd360f6d2f75b8a456432a7f4b6181
-
SHA1
71af916f5949fb3b9f78ddb445bd870df3ba9070
-
SHA256
98d6667c8078bc4e80b02010bfa3b63372f4eadf0134b24f818363bac21315e3
-
SHA512
024c8094ba3260c2d2e24aba33bf158306700a06c87bb095d616715b4957fa0e40c9d978712b8f211c47c64a1762d9c2886f9eac134a01cb77ba22a079b90044
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpoh:PMpASIcWYx2U6hAJQn1
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-