General
-
Target
f00b7639be1fcd4b325dba377dd68c47_JaffaCakes118
-
Size
467KB
-
Sample
241214-wr6wgaznax
-
MD5
f00b7639be1fcd4b325dba377dd68c47
-
SHA1
ce697e4bdd0551a9bf733e8b762399b12d2afc6e
-
SHA256
f0072eebe3e4f298d81086ffc3e44df3589a56ef1e0a4ee5d8f43623fd16ef0a
-
SHA512
46be0b99a99b41c17fc3b8434e92893e0369d064744c57589fece5abab6ec2293dea23cd2c75276d86c64033779d4a1ccc31f8ee12964ffa8e84046803634197
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mg:9x9GzHlTv/b35tecFB6l
Behavioral task
behavioral1
Sample
f00b7639be1fcd4b325dba377dd68c47_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
f00b7639be1fcd4b325dba377dd68c47_JaffaCakes118
-
Size
467KB
-
MD5
f00b7639be1fcd4b325dba377dd68c47
-
SHA1
ce697e4bdd0551a9bf733e8b762399b12d2afc6e
-
SHA256
f0072eebe3e4f298d81086ffc3e44df3589a56ef1e0a4ee5d8f43623fd16ef0a
-
SHA512
46be0b99a99b41c17fc3b8434e92893e0369d064744c57589fece5abab6ec2293dea23cd2c75276d86c64033779d4a1ccc31f8ee12964ffa8e84046803634197
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mg:9x9GzHlTv/b35tecFB6l
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-