General
-
Target
e9ee4b6aa74639e8828bc4a855738e2b_JaffaCakes118
-
Size
264KB
-
Sample
241213-e99lmszqel
-
MD5
e9ee4b6aa74639e8828bc4a855738e2b
-
SHA1
c3de0da45b74cb2e2fe366048f2272ac54950843
-
SHA256
c7ce8e90ff659501b6ce2c4c76b2a753ae5ac6b48825b3cc259c05af4293fb12
-
SHA512
61617ac90a7fb16ea8ebd14d2a5f52c01d56610fb5051b7653a18de28ad451f9a9a9c41173736c570fafd3205f77737fac680aece684258d70cf064cd72b43e3
-
SSDEEP
3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANakD:ASeyGpTaesaQUufkL57YsL9NIx9ANae
Behavioral task
behavioral1
Sample
e9ee4b6aa74639e8828bc4a855738e2b_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
e9ee4b6aa74639e8828bc4a855738e2b_JaffaCakes118
-
Size
264KB
-
MD5
e9ee4b6aa74639e8828bc4a855738e2b
-
SHA1
c3de0da45b74cb2e2fe366048f2272ac54950843
-
SHA256
c7ce8e90ff659501b6ce2c4c76b2a753ae5ac6b48825b3cc259c05af4293fb12
-
SHA512
61617ac90a7fb16ea8ebd14d2a5f52c01d56610fb5051b7653a18de28ad451f9a9a9c41173736c570fafd3205f77737fac680aece684258d70cf064cd72b43e3
-
SSDEEP
3072:AUApueDWSppTaeskDEjUrqfkZ557YzAL9gFoI3X3fZE5UANakD:ASeyGpTaesaQUufkL57YsL9NIx9ANae
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-