General
-
Target
70ef4cdbe641c64f858371e21bc7cf3b_JaffaCakes118
-
Size
59KB
-
Sample
240725-x96h4atckh
-
MD5
70ef4cdbe641c64f858371e21bc7cf3b
-
SHA1
b4e7be7b2e5e59e6a78b04bd648ab8baccdcb17c
-
SHA256
2034953730d0881bf4c1217277cb123f7b71de3fd0f719171b587ed7f5058399
-
SHA512
d60b3ed637280e2ebd929d06fcde2701ccf4f1dc3eaa74ecfa8ce4b504bbb3d4cc300e323d04d0ab403c1797f9a89e5c8b1cff2c7abd8663d12af9f631f259b6
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdw
Static task
static1
Behavioral task
behavioral1
Sample
70ef4cdbe641c64f858371e21bc7cf3b_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
70ef4cdbe641c64f858371e21bc7cf3b_JaffaCakes118
-
Size
59KB
-
MD5
70ef4cdbe641c64f858371e21bc7cf3b
-
SHA1
b4e7be7b2e5e59e6a78b04bd648ab8baccdcb17c
-
SHA256
2034953730d0881bf4c1217277cb123f7b71de3fd0f719171b587ed7f5058399
-
SHA512
d60b3ed637280e2ebd929d06fcde2701ccf4f1dc3eaa74ecfa8ce4b504bbb3d4cc300e323d04d0ab403c1797f9a89e5c8b1cff2c7abd8663d12af9f631f259b6
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPX:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdw
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-