General
-
Target
959739b4eefa6fd1987bee3dbf3dde2d_JaffaCakes118
-
Size
240KB
-
Sample
241124-syylwswmaw
-
MD5
959739b4eefa6fd1987bee3dbf3dde2d
-
SHA1
7b3c43acb07f85a5e68d2911e7eeb8cffac0ca83
-
SHA256
f61aa99140b4258230ebc33e3d394e4798922984a939fda50b4c956c0ec24d53
-
SHA512
d251f813652644c8a9b4bcf75b89d69fa7fe7d4fa0f9e8f30719267f03add10ced363ab41ab2f993d30f36e66dd162238478f55b7144b59ceb9ece61684ba143
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2U:ZASpvo0LKkRzpxJ2kRqroiU
Behavioral task
behavioral1
Sample
959739b4eefa6fd1987bee3dbf3dde2d_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
959739b4eefa6fd1987bee3dbf3dde2d_JaffaCakes118
-
Size
240KB
-
MD5
959739b4eefa6fd1987bee3dbf3dde2d
-
SHA1
7b3c43acb07f85a5e68d2911e7eeb8cffac0ca83
-
SHA256
f61aa99140b4258230ebc33e3d394e4798922984a939fda50b4c956c0ec24d53
-
SHA512
d251f813652644c8a9b4bcf75b89d69fa7fe7d4fa0f9e8f30719267f03add10ced363ab41ab2f993d30f36e66dd162238478f55b7144b59ceb9ece61684ba143
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2U:ZASpvo0LKkRzpxJ2kRqroiU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-