General
-
Target
d87385c9bc213e4b3cb27518a3712e41_JaffaCakes118
-
Size
439KB
-
Sample
241208-xy78jssney
-
MD5
d87385c9bc213e4b3cb27518a3712e41
-
SHA1
b0c75ec76acf79589b42dd48dd2c38f1d9dd1fac
-
SHA256
b3e936d140efd7ab76f3650711f3cd974cc1f2e5ed185b08aa85915b1da6e599
-
SHA512
dff3aa4e100e22d128e2d53105f923bb3456ee08a016862d09b855d0ced2cdaf6027303fedac80e2deca07f0a5f65a30ff9fcd104e06e8a06f6e6970a454da45
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjS:oMpASIcWYx2U6hAJQnP
Behavioral task
behavioral1
Sample
d87385c9bc213e4b3cb27518a3712e41_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
d87385c9bc213e4b3cb27518a3712e41_JaffaCakes118
-
Size
439KB
-
MD5
d87385c9bc213e4b3cb27518a3712e41
-
SHA1
b0c75ec76acf79589b42dd48dd2c38f1d9dd1fac
-
SHA256
b3e936d140efd7ab76f3650711f3cd974cc1f2e5ed185b08aa85915b1da6e599
-
SHA512
dff3aa4e100e22d128e2d53105f923bb3456ee08a016862d09b855d0ced2cdaf6027303fedac80e2deca07f0a5f65a30ff9fcd104e06e8a06f6e6970a454da45
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjS:oMpASIcWYx2U6hAJQnP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-