General
-
Target
7e469301551cfca0009f1c98b3b292e4_JaffaCakes118
-
Size
59KB
-
Sample
241030-hv3rbsydne
-
MD5
7e469301551cfca0009f1c98b3b292e4
-
SHA1
6c3dfd9ce6858f29480dbb9bb0d330f80ab8054c
-
SHA256
f83e62025eef3bd37262180becdfa852e0ff55bb01ec6ff560bbaaf82678cd11
-
SHA512
dbc1a445ce832381117409395d53d7da0fe79a4b8c4bdab873603141371b1c2f1a8463f8a53f7f1cdb3a9314255ede0a239a6b601567e77a351a01390c13e749
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP4:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdV
Static task
static1
Behavioral task
behavioral1
Sample
7e469301551cfca0009f1c98b3b292e4_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
7e469301551cfca0009f1c98b3b292e4_JaffaCakes118
-
Size
59KB
-
MD5
7e469301551cfca0009f1c98b3b292e4
-
SHA1
6c3dfd9ce6858f29480dbb9bb0d330f80ab8054c
-
SHA256
f83e62025eef3bd37262180becdfa852e0ff55bb01ec6ff560bbaaf82678cd11
-
SHA512
dbc1a445ce832381117409395d53d7da0fe79a4b8c4bdab873603141371b1c2f1a8463f8a53f7f1cdb3a9314255ede0a239a6b601567e77a351a01390c13e749
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP4:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdV
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-