General
-
Target
f6e5af41d6a583140527a15a22b3d68c_JaffaCakes118
-
Size
59KB
-
Sample
241216-c1mpea1mhn
-
MD5
f6e5af41d6a583140527a15a22b3d68c
-
SHA1
f36b1e2527a4d9f03ac1be6a1be9b14e72efdc26
-
SHA256
649ff02ce6096376f2f60efb4f07450c9b8cc78313f4e41f9e662467d115ad39
-
SHA512
f33c3729144f3512bcfec8c57db882bd65f26c8de1e07c3f446603b67851e5b946950dd13303ec7d3b360180a4481e5c0420c67e9f700c02188373fcf5f1f867
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdt
Static task
static1
Behavioral task
behavioral1
Sample
f6e5af41d6a583140527a15a22b3d68c_JaffaCakes118.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
f6e5af41d6a583140527a15a22b3d68c_JaffaCakes118
-
Size
59KB
-
MD5
f6e5af41d6a583140527a15a22b3d68c
-
SHA1
f36b1e2527a4d9f03ac1be6a1be9b14e72efdc26
-
SHA256
649ff02ce6096376f2f60efb4f07450c9b8cc78313f4e41f9e662467d115ad39
-
SHA512
f33c3729144f3512bcfec8c57db882bd65f26c8de1e07c3f446603b67851e5b946950dd13303ec7d3b360180a4481e5c0420c67e9f700c02188373fcf5f1f867
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPu:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdt
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-