General
-
Target
88fc65aabc5e0d85ac7b4492ce91c25d_JaffaCakes118
-
Size
535KB
-
Sample
241103-bzkyra1djb
-
MD5
88fc65aabc5e0d85ac7b4492ce91c25d
-
SHA1
f755aaa79828da46f919166ae7d3a704c265abfc
-
SHA256
549fea1b9113b1e41724bda53f2c04cbc49615cbbb4ba2f01b7f66f2f4755342
-
SHA512
1ca51aa833817000b291f6a167d0b41ff328e966875fbd9f137de92da51280e38de13cbe9e90e976a64dd287e2a6a6a04afbd38812d4e9a5bb1d46e5411f0236
-
SSDEEP
12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2z:cLjQC+bs0YOz
Behavioral task
behavioral1
Sample
88fc65aabc5e0d85ac7b4492ce91c25d_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
88fc65aabc5e0d85ac7b4492ce91c25d_JaffaCakes118
-
Size
535KB
-
MD5
88fc65aabc5e0d85ac7b4492ce91c25d
-
SHA1
f755aaa79828da46f919166ae7d3a704c265abfc
-
SHA256
549fea1b9113b1e41724bda53f2c04cbc49615cbbb4ba2f01b7f66f2f4755342
-
SHA512
1ca51aa833817000b291f6a167d0b41ff328e966875fbd9f137de92da51280e38de13cbe9e90e976a64dd287e2a6a6a04afbd38812d4e9a5bb1d46e5411f0236
-
SSDEEP
12288:cdBNKTCqqwXCcdgTw9+MvA+BisqYpxHte1oS2z:cLjQC+bs0YOz
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-