General
-
Target
79fba638017f31c7544ee935ff5a2e1a_JaffaCakes118
-
Size
440KB
-
Sample
241028-retm6aymgp
-
MD5
79fba638017f31c7544ee935ff5a2e1a
-
SHA1
7d0e650eadb6588429e915a33646ecd4c203aba4
-
SHA256
23d7ceb4362993c524a7218ca632976a4f24b791332830ca0c7ea44f51d77e22
-
SHA512
47cbdb3e20226c7fd5b92ccc74cdf7a4ac67e6e79084082b9d71d9e78d4659f9f1735577ba6b5ca109418733d7e037706f3a52c6a8f059ac16cf4e2f27495703
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnb
Behavioral task
behavioral1
Sample
79fba638017f31c7544ee935ff5a2e1a_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
79fba638017f31c7544ee935ff5a2e1a_JaffaCakes118
-
Size
440KB
-
MD5
79fba638017f31c7544ee935ff5a2e1a
-
SHA1
7d0e650eadb6588429e915a33646ecd4c203aba4
-
SHA256
23d7ceb4362993c524a7218ca632976a4f24b791332830ca0c7ea44f51d77e22
-
SHA512
47cbdb3e20226c7fd5b92ccc74cdf7a4ac67e6e79084082b9d71d9e78d4659f9f1735577ba6b5ca109418733d7e037706f3a52c6a8f059ac16cf4e2f27495703
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjk:oMpASIcWYx2U6hAJQnb
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-