General
-
Target
778f81ef7b8407bceef623768b15a0f0_JaffaCakes118
-
Size
136KB
-
Sample
241028-ejhp8sxnfq
-
MD5
778f81ef7b8407bceef623768b15a0f0
-
SHA1
e3a150a28b6a2425309f5098fccfc90ca31371cf
-
SHA256
35c589a7a35c6e194c529212e3f314dedbb0df469538e486bc7faf0ce5de7f2b
-
SHA512
51b2d59239963cd8412cd1d71ede90733deab89e9ef3982ce21ecf7ea7f390445ad3f27accc2b3498e255570f7827bb70258ea0256c7a66ceb8107ea8095e42c
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APx:P/5kqCxiXEcO3XfGf2tMUf6odgR5A5
Behavioral task
behavioral1
Sample
778f81ef7b8407bceef623768b15a0f0_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
778f81ef7b8407bceef623768b15a0f0_JaffaCakes118
-
Size
136KB
-
MD5
778f81ef7b8407bceef623768b15a0f0
-
SHA1
e3a150a28b6a2425309f5098fccfc90ca31371cf
-
SHA256
35c589a7a35c6e194c529212e3f314dedbb0df469538e486bc7faf0ce5de7f2b
-
SHA512
51b2d59239963cd8412cd1d71ede90733deab89e9ef3982ce21ecf7ea7f390445ad3f27accc2b3498e255570f7827bb70258ea0256c7a66ceb8107ea8095e42c
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APx:P/5kqCxiXEcO3XfGf2tMUf6odgR5A5
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-