General
-
Target
d2a83b6bc1f770d4964edcb7e5854255_JaffaCakes118
-
Size
536KB
-
Sample
241207-qlcgsaynbl
-
MD5
d2a83b6bc1f770d4964edcb7e5854255
-
SHA1
112ef4ca247f83fe1091b470ea4ce9fcc3b036fb
-
SHA256
1f82a7ee8be3d927ae9002774e4aabd919d507d25ae3cb9c8df2d891a2ab5cd1
-
SHA512
0321c145ae2ba7f14288b8b62add3036b9473116fb5468194b441443c6007abede78c31b31068d1bcfa79857af3717561f3e4260e7f427f52618c2a38a92d6b9
-
SSDEEP
12288:V0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPc:V0P/k4lb2wKatc
Behavioral task
behavioral1
Sample
d2a83b6bc1f770d4964edcb7e5854255_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
d2a83b6bc1f770d4964edcb7e5854255_JaffaCakes118
-
Size
536KB
-
MD5
d2a83b6bc1f770d4964edcb7e5854255
-
SHA1
112ef4ca247f83fe1091b470ea4ce9fcc3b036fb
-
SHA256
1f82a7ee8be3d927ae9002774e4aabd919d507d25ae3cb9c8df2d891a2ab5cd1
-
SHA512
0321c145ae2ba7f14288b8b62add3036b9473116fb5468194b441443c6007abede78c31b31068d1bcfa79857af3717561f3e4260e7f427f52618c2a38a92d6b9
-
SSDEEP
12288:V0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPc:V0P/k4lb2wKatc
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-