General
-
Target
ff186b26ca84dfa3b3b5640dee15eee2_JaffaCakes118
-
Size
782KB
-
Sample
241219-j181zawmez
-
MD5
ff186b26ca84dfa3b3b5640dee15eee2
-
SHA1
3ceedd19449602df733bf34e4ad3353fef5f1da8
-
SHA256
886308422d89cb2ace24ba34833cdea1c4270f619c1061806d78f6748fbd0d5c
-
SHA512
97723d675be9a0508d4f346c24a5110522540158bba3391686350f2c58ad83f87174574d1a0f7db20f1aea7e24a6320cab3d50332968bc0a4887171f6d87a915
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1+:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8r
Behavioral task
behavioral1
Sample
ff186b26ca84dfa3b3b5640dee15eee2_JaffaCakes118.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
ff186b26ca84dfa3b3b5640dee15eee2_JaffaCakes118
-
Size
782KB
-
MD5
ff186b26ca84dfa3b3b5640dee15eee2
-
SHA1
3ceedd19449602df733bf34e4ad3353fef5f1da8
-
SHA256
886308422d89cb2ace24ba34833cdea1c4270f619c1061806d78f6748fbd0d5c
-
SHA512
97723d675be9a0508d4f346c24a5110522540158bba3391686350f2c58ad83f87174574d1a0f7db20f1aea7e24a6320cab3d50332968bc0a4887171f6d87a915
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1+:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8r
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-