General
-
Target
7952e3fe53f8cc617b873ef96ef5d3bf_JaffaCakes118
-
Size
168KB
-
Sample
241028-m8qfdayajp
-
MD5
7952e3fe53f8cc617b873ef96ef5d3bf
-
SHA1
8dcc60c41b72d455130d5eb52ab63ad81bd5dee4
-
SHA256
110a12e005c8c482bef3a563b54809c699f67a428c590c35d1bc47d4784e3dc8
-
SHA512
46c6e17de0d414af17853914de15eb6e17d1e37c01eb7d64b0c831331da0b9754ba864c42e3aa984297fc558f93c72ac3712f8618074906a9281658a241c2cb8
-
SSDEEP
1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfyH3:eADA0Wc7UJ6LZMaHLW65DE8pxWqX
Behavioral task
behavioral1
Sample
7952e3fe53f8cc617b873ef96ef5d3bf_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
7952e3fe53f8cc617b873ef96ef5d3bf_JaffaCakes118
-
Size
168KB
-
MD5
7952e3fe53f8cc617b873ef96ef5d3bf
-
SHA1
8dcc60c41b72d455130d5eb52ab63ad81bd5dee4
-
SHA256
110a12e005c8c482bef3a563b54809c699f67a428c590c35d1bc47d4784e3dc8
-
SHA512
46c6e17de0d414af17853914de15eb6e17d1e37c01eb7d64b0c831331da0b9754ba864c42e3aa984297fc558f93c72ac3712f8618074906a9281658a241c2cb8
-
SSDEEP
1536:eADA0Wbt1931D2P7BWLQ4zR4LUKMcPHFE3HP/GTW65CGEgvpxyTfyH3:eADA0Wc7UJ6LZMaHLW65DE8pxWqX
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-