General
-
Target
f65485d9c225e21dfad37fa199d9e93c_JaffaCakes118
-
Size
494KB
-
Sample
241215-31j7dsvpgq
-
MD5
f65485d9c225e21dfad37fa199d9e93c
-
SHA1
807362f9b5765ba2a2ea4034bc0fd7a106e30ef9
-
SHA256
e7d9b3311972d7f5289c382e61d7411383cd5b26f69fe91f48616d7a0591b311
-
SHA512
825edbe3e55abfcb328ef90ea635153e893cfdd9da60cfdd97f00f87cad3dbad69d443e23ccb4a2e1245245c28152e6b7d8883feefff255e794557c76a39d403
-
SSDEEP
6144:KKLOgsgomKLEFESGz0SPpeEPkPDPrzgtRY5RdrHc13FG9ItU6GvPwm:/OgwmisETzuaeDPvjJ81VGqK6GvPr
Behavioral task
behavioral1
Sample
f65485d9c225e21dfad37fa199d9e93c_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
f65485d9c225e21dfad37fa199d9e93c_JaffaCakes118
-
Size
494KB
-
MD5
f65485d9c225e21dfad37fa199d9e93c
-
SHA1
807362f9b5765ba2a2ea4034bc0fd7a106e30ef9
-
SHA256
e7d9b3311972d7f5289c382e61d7411383cd5b26f69fe91f48616d7a0591b311
-
SHA512
825edbe3e55abfcb328ef90ea635153e893cfdd9da60cfdd97f00f87cad3dbad69d443e23ccb4a2e1245245c28152e6b7d8883feefff255e794557c76a39d403
-
SSDEEP
6144:KKLOgsgomKLEFESGz0SPpeEPkPDPrzgtRY5RdrHc13FG9ItU6GvPwm:/OgwmisETzuaeDPvjJ81VGqK6GvPr
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-