General
-
Target
048eaf8f6f8f1567d67edb4a582cb021_JaffaCakes118
-
Size
736KB
-
Sample
240428-g3pc8sab2x
-
MD5
048eaf8f6f8f1567d67edb4a582cb021
-
SHA1
6bc4822a95c1d375b544df6bc1a566f1393ba598
-
SHA256
32c89c8e6ab723536e2bf3c53339cc95d8b97b6a6885565823c98c6c68f8b41b
-
SHA512
4cf073a8c9bd0487f3f4a25dca9f6dbcf9adad2d0c9cba992d4a9a1f5ee4b98e21f5079e33b93812c49cc0b2cf7191a9063ce93ec52d32a0dea129b9a784ed3d
-
SSDEEP
12288:sovmIajF26wPUD5MvCaGyba91k6ctu3HGqv6LPwtlRJjahSSsk9cp8wYMbOCSuoz:sovmIYFSPUD5Mv/L6ctu3HGqv6LPSlzw
Static task
static1
Behavioral task
behavioral1
Sample
048eaf8f6f8f1567d67edb4a582cb021_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
048eaf8f6f8f1567d67edb4a582cb021_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
lokibot
http://37.72.168.229/cane/come/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
048eaf8f6f8f1567d67edb4a582cb021_JaffaCakes118
-
Size
736KB
-
MD5
048eaf8f6f8f1567d67edb4a582cb021
-
SHA1
6bc4822a95c1d375b544df6bc1a566f1393ba598
-
SHA256
32c89c8e6ab723536e2bf3c53339cc95d8b97b6a6885565823c98c6c68f8b41b
-
SHA512
4cf073a8c9bd0487f3f4a25dca9f6dbcf9adad2d0c9cba992d4a9a1f5ee4b98e21f5079e33b93812c49cc0b2cf7191a9063ce93ec52d32a0dea129b9a784ed3d
-
SSDEEP
12288:sovmIajF26wPUD5MvCaGyba91k6ctu3HGqv6LPwtlRJjahSSsk9cp8wYMbOCSuoz:sovmIYFSPUD5Mv/L6ctu3HGqv6LPSlzw
Score10/10-
Accesses Microsoft Outlook profiles
-