General
-
Target
e815c8a0c6954345e8a1303c19e88934_JaffaCakes118
-
Size
449KB
-
Sample
241212-yzp9ssyjbk
-
MD5
e815c8a0c6954345e8a1303c19e88934
-
SHA1
5cb5b9102f3f090aef31109f3f652312eef86973
-
SHA256
262e25b7a634e6da624afb712b8c05f1413461b4b013b4955affedc8bfa3d01e
-
SHA512
0fc66f8ff2cab495636b68ff406b859fe8059cf2b0856f721bfff13f6eb72efbafb7ba55a6ce4e33d317778117b58a19eaf9d48168930dba4dd2e9940b4d27fe
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFt:CMpASIcWYx2U6hAJQnS
Behavioral task
behavioral1
Sample
e815c8a0c6954345e8a1303c19e88934_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
e815c8a0c6954345e8a1303c19e88934_JaffaCakes118
-
Size
449KB
-
MD5
e815c8a0c6954345e8a1303c19e88934
-
SHA1
5cb5b9102f3f090aef31109f3f652312eef86973
-
SHA256
262e25b7a634e6da624afb712b8c05f1413461b4b013b4955affedc8bfa3d01e
-
SHA512
0fc66f8ff2cab495636b68ff406b859fe8059cf2b0856f721bfff13f6eb72efbafb7ba55a6ce4e33d317778117b58a19eaf9d48168930dba4dd2e9940b4d27fe
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFt:CMpASIcWYx2U6hAJQnS
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-