General
-
Target
bc0da9211c89967c1e61c07f6593fad3_JaffaCakes118
-
Size
93KB
-
Sample
241203-gv6bsasrez
-
MD5
bc0da9211c89967c1e61c07f6593fad3
-
SHA1
a2277c4f0897ac8e81b9e85ddfc35850a6e7979a
-
SHA256
8756e18b4eb6523491e222d2a53ba0fac35574a527af6b8dd2dc89632891c33a
-
SHA512
9f39df9836d51c46faa5e88195141282ed04e0434463b131fad406a2eae41972ff369793c099f128a5b8e9d33fb0fb74dbb769c7927f6260e257c3ab96761911
-
SSDEEP
1536:atG+1FPl09F6YBY8iUvj7aPgGy9t2gOabuXwRRuzDUZF8HTq:U1f09F6YBY8v7aoGyq1abu1zDiGHTq
Behavioral task
behavioral1
Sample
bc0da9211c89967c1e61c07f6593fad3_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
bc0da9211c89967c1e61c07f6593fad3_JaffaCakes118
-
Size
93KB
-
MD5
bc0da9211c89967c1e61c07f6593fad3
-
SHA1
a2277c4f0897ac8e81b9e85ddfc35850a6e7979a
-
SHA256
8756e18b4eb6523491e222d2a53ba0fac35574a527af6b8dd2dc89632891c33a
-
SHA512
9f39df9836d51c46faa5e88195141282ed04e0434463b131fad406a2eae41972ff369793c099f128a5b8e9d33fb0fb74dbb769c7927f6260e257c3ab96761911
-
SSDEEP
1536:atG+1FPl09F6YBY8iUvj7aPgGy9t2gOabuXwRRuzDUZF8HTq:U1f09F6YBY8v7aoGyq1abu1zDiGHTq
-
Asyncrat family
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-