General
-
Target
82931e46f5f01fd16a70796f601a4794_JaffaCakes118
-
Size
59KB
-
Sample
241031-k4fdhatmhx
-
MD5
82931e46f5f01fd16a70796f601a4794
-
SHA1
e3e4952fbcc0715ca20a113f8c2ae46b12975c08
-
SHA256
7bc667f6b0abaa040977919b96ed061e9e245612042aa587cdb14e4b5cf9a627
-
SHA512
d78c9525acda8d1b862a7738291d6d7a3a2994380b71cc83bd5001fd966ac6f169f69abd1d375337f175073e18558ea79ab3001e0cc1b2a2c02ea7f63d479fc6
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPI:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdom
Static task
static1
Behavioral task
behavioral1
Sample
82931e46f5f01fd16a70796f601a4794_JaffaCakes118.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
82931e46f5f01fd16a70796f601a4794_JaffaCakes118
-
Size
59KB
-
MD5
82931e46f5f01fd16a70796f601a4794
-
SHA1
e3e4952fbcc0715ca20a113f8c2ae46b12975c08
-
SHA256
7bc667f6b0abaa040977919b96ed061e9e245612042aa587cdb14e4b5cf9a627
-
SHA512
d78c9525acda8d1b862a7738291d6d7a3a2994380b71cc83bd5001fd966ac6f169f69abd1d375337f175073e18558ea79ab3001e0cc1b2a2c02ea7f63d479fc6
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPI:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdom
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-