General
-
Target
dd95cc49d922c4655c7b8487e940b17f_JaffaCakes118
-
Size
536KB
-
Sample
241210-hzsf6asren
-
MD5
dd95cc49d922c4655c7b8487e940b17f
-
SHA1
44be3505db82f782e64f118cacbab3677a57f80c
-
SHA256
9383a0d98910d26ea4105baa198ba536f44c4aeb48c287199a0d6158d7b888e1
-
SHA512
2e02ad0885ca6890b8d331afc4e5db7150e3524f0498bc493513d5bb4bf1ffd6165d2a368007992503dcccdb64c5a3b0b5511149d9296aed86e3cea890ca7b54
-
SSDEEP
12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NP4:q0P/k4lb2wKat4
Behavioral task
behavioral1
Sample
dd95cc49d922c4655c7b8487e940b17f_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
dd95cc49d922c4655c7b8487e940b17f_JaffaCakes118
-
Size
536KB
-
MD5
dd95cc49d922c4655c7b8487e940b17f
-
SHA1
44be3505db82f782e64f118cacbab3677a57f80c
-
SHA256
9383a0d98910d26ea4105baa198ba536f44c4aeb48c287199a0d6158d7b888e1
-
SHA512
2e02ad0885ca6890b8d331afc4e5db7150e3524f0498bc493513d5bb4bf1ffd6165d2a368007992503dcccdb64c5a3b0b5511149d9296aed86e3cea890ca7b54
-
SSDEEP
12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NP4:q0P/k4lb2wKat4
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-