General
-
Target
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118
-
Size
235KB
-
Sample
241213-h6v6matnfp
-
MD5
ea893657c3807e0b517ede8a64beeac4
-
SHA1
c5dabdc84044acb09983d783d884c643f04e8624
-
SHA256
9af5d8a13760a5b69ec7af7d7851de438c4ad903c08b1b6e0e4d272425a02c52
-
SHA512
46c141bb9de4ae7dac657d2697b0ae32f9cca66c67be5d938fe508502d9075f15bca4842e62e5aa3e7a53b4d5007bbbb1deb24c5d51c26ee1f94074ad127cbb1
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2P:ZASpvo0LKkRzpxJ2kRqroiP
Behavioral task
behavioral1
Sample
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
ea893657c3807e0b517ede8a64beeac4_JaffaCakes118
-
Size
235KB
-
MD5
ea893657c3807e0b517ede8a64beeac4
-
SHA1
c5dabdc84044acb09983d783d884c643f04e8624
-
SHA256
9af5d8a13760a5b69ec7af7d7851de438c4ad903c08b1b6e0e4d272425a02c52
-
SHA512
46c141bb9de4ae7dac657d2697b0ae32f9cca66c67be5d938fe508502d9075f15bca4842e62e5aa3e7a53b4d5007bbbb1deb24c5d51c26ee1f94074ad127cbb1
-
SSDEEP
3072:K8ASpvo0LKrXEX65ezpxJ2kbJ7mv73E2o/9sY2P:ZASpvo0LKkRzpxJ2kRqroiP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-