General
-
Target
846296e641ca832b0fcb1d9e127968a8_JaffaCakes118
-
Size
510KB
-
Sample
241101-mxqa8s1pdn
-
MD5
846296e641ca832b0fcb1d9e127968a8
-
SHA1
cb914f7418641a1f5226ec7bc46c066e54c69ec3
-
SHA256
577346c68b2c6aae31ccc7ff0c8f325d5579ebc35c257996b69e3cb009eab0a4
-
SHA512
f3852c8b032681aff93c00f869e69b5667a0caf768323aff0b92fb7449783022343c3eb627ccbea560cf0ad356fc51a1775dd7ceb19a0f2672417fc9e09028b3
-
SSDEEP
12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFu:j/D0caF8wvhb43pDbu
Behavioral task
behavioral1
Sample
846296e641ca832b0fcb1d9e127968a8_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
218.54.31.165
Targets
-
-
Target
846296e641ca832b0fcb1d9e127968a8_JaffaCakes118
-
Size
510KB
-
MD5
846296e641ca832b0fcb1d9e127968a8
-
SHA1
cb914f7418641a1f5226ec7bc46c066e54c69ec3
-
SHA256
577346c68b2c6aae31ccc7ff0c8f325d5579ebc35c257996b69e3cb009eab0a4
-
SHA512
f3852c8b032681aff93c00f869e69b5667a0caf768323aff0b92fb7449783022343c3eb627ccbea560cf0ad356fc51a1775dd7ceb19a0f2672417fc9e09028b3
-
SSDEEP
12288:j/fCEOMsm8nc3qWQ8wqKhb43nLl5tDrXlFu:j/D0caF8wvhb43pDbu
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-