General
- Target jaffacakes118_9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee.bin
- Size 150KB
- Sample260930-lk3kcstwbt
- SHA256 9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee
- MD5 6a22bbedde24f0b43bea3e9aba6bcd2a
- SHA1 ab62d34f197f64a5296c6854d79c6d1d5e96dd24
- SHA512 8d189fd237971ba865372c066b7a87a1965c691494596513d90e9c00f2f3e679a9c3708175305279e9eae7ae2753ed598026ddddf6b021e5460057fc7fff7436
- SSDEEP 3072:QYB4Qlayj4kOLH7yUzOu376z371aRdtpt:RyQlayj4vLmar6zcvtpt
- TLSH T140E3D31076408475E32917324906EAF14969AC3D16E8E98FF7787E3A6E312C39B7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.184
Targets
-
- Target jaffacakes118_9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee.bin
- Size 150KB
- SHA256 9c551fe2f874c9d68a56cf7e9991ebf82dbff4f76b21b335a4092a9b472e55ee
- MD5 6a22bbedde24f0b43bea3e9aba6bcd2a
- SHA1 ab62d34f197f64a5296c6854d79c6d1d5e96dd24
- SHA512 8d189fd237971ba865372c066b7a87a1965c691494596513d90e9c00f2f3e679a9c3708175305279e9eae7ae2753ed598026ddddf6b021e5460057fc7fff7436
- SSDEEP 3072:QYB4Qlayj4kOLH7yUzOu376z371aRdtpt:RyQlayj4vLmar6zcvtpt
- TLSH T140E3D31076408475E32917324906EAF14969AC3D16E8E98FF7787E3A6E312C39B7324F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE