General
-
Target
06b7167f2f9195c683459d3384c2a9ae_JaffaCakes118
-
Size
467KB
-
Sample
241001-vybhgavfpa
-
MD5
06b7167f2f9195c683459d3384c2a9ae
-
SHA1
0a81e1e07011fd714e5125b96434a9628ddaec38
-
SHA256
7074c5e7408a36fbdd515e93f91b514f61da41cc54917cd1aa31b2428ddd0f51
-
SHA512
8b2585446953b843c10340d2e96506b1fd48c0726d90e6324326141033c4f917ac0314468f5f96654faf17d79f3a2796f7dba16b8c87b5d9b6da305f92e43466
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:9x9GzHlTv/b35tecFB6W
Behavioral task
behavioral1
Sample
06b7167f2f9195c683459d3384c2a9ae_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
06b7167f2f9195c683459d3384c2a9ae_JaffaCakes118
-
Size
467KB
-
MD5
06b7167f2f9195c683459d3384c2a9ae
-
SHA1
0a81e1e07011fd714e5125b96434a9628ddaec38
-
SHA256
7074c5e7408a36fbdd515e93f91b514f61da41cc54917cd1aa31b2428ddd0f51
-
SHA512
8b2585446953b843c10340d2e96506b1fd48c0726d90e6324326141033c4f917ac0314468f5f96654faf17d79f3a2796f7dba16b8c87b5d9b6da305f92e43466
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mj:9x9GzHlTv/b35tecFB6W
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-