General
-
Target
7cbfcfbea7895720df5904630f97a3ac_JaffaCakes118
-
Size
447KB
-
Sample
240731-rppf7axfpm
-
MD5
7cbfcfbea7895720df5904630f97a3ac
-
SHA1
0c83df8fa50c2591964603f0a02db8f9621ee30d
-
SHA256
ed5e31592f1ab4b99ec67646993946ecfb7226c1c3fc6aaf8188f9665047057e
-
SHA512
3a45796868070cf024cf0ecba8bf9fa81e7fecb32c21f836a2e3c6622691aa114317691c865074c4b17664acbaeb31b26054e1046efd2758b04860e09dfa338a
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpo+:PMpASIcWYx2U6hAJQni
Behavioral task
behavioral1
Sample
7cbfcfbea7895720df5904630f97a3ac_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
7cbfcfbea7895720df5904630f97a3ac_JaffaCakes118
-
Size
447KB
-
MD5
7cbfcfbea7895720df5904630f97a3ac
-
SHA1
0c83df8fa50c2591964603f0a02db8f9621ee30d
-
SHA256
ed5e31592f1ab4b99ec67646993946ecfb7226c1c3fc6aaf8188f9665047057e
-
SHA512
3a45796868070cf024cf0ecba8bf9fa81e7fecb32c21f836a2e3c6622691aa114317691c865074c4b17664acbaeb31b26054e1046efd2758b04860e09dfa338a
-
SSDEEP
6144:PEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpo+:PMpASIcWYx2U6hAJQni
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-