General
- Target 04ec8239792ff38a0daa275b9fc36209_JaffaCakes118
- Size 261KB
- Sample240328-n12dcahe79
- SHA256 f0bbc262741c8885098c6b4b85b9eaebc063a7d65b4c1f7bbb381520bbfc7382
- MD5 04ec8239792ff38a0daa275b9fc36209
- SHA1 1014d074388aafb17607021d0cfb6a3f37b37e75
- SHA512 82e3145e2ee6a695f8f12900c773b685decdd092d247379934236f436162f134baa8ba7076ba9a15316e1c4e2cbba37c8fac30bc2228b53d0d19a338d013ace6
- SSDEEP 6144:sczR3TNhoEFdyyar2ey9A3WSHozV0p0o:BzR3pXHyyar2e3zHozM0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
04ec8239792ff38a0daa275b9fc36209_JaffaCakes118.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
04ec8239792ff38a0daa275b9fc36209_JaffaCakes118.exe
Resource
win10v2004-20240226-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://directorycart.com/upload/
-
http://tierzahnarzt.at/upload/
-
http://streetofcards.com/upload/
-
http://ycdfzd.com/upload/
-
http://successcoachceo.com/upload/
-
http://uhvu.cn/upload/
-
http://japanarticle.com/upload/
rc4.i32
rc4.i32
Targets
-
- Target 04ec8239792ff38a0daa275b9fc36209_JaffaCakes118
- Size 261KB
- SHA256 f0bbc262741c8885098c6b4b85b9eaebc063a7d65b4c1f7bbb381520bbfc7382
- MD5 04ec8239792ff38a0daa275b9fc36209
- SHA1 1014d074388aafb17607021d0cfb6a3f37b37e75
- SHA512 82e3145e2ee6a695f8f12900c773b685decdd092d247379934236f436162f134baa8ba7076ba9a15316e1c4e2cbba37c8fac30bc2228b53d0d19a338d013ace6
- SSDEEP 6144:sczR3TNhoEFdyyar2ey9A3WSHozV0p0o:BzR3pXHyyar2e3zHozM0
- MD5 SHA1 SHA512 SSDEEP
Score10/10Deletes itself