General
-
Target
09a93bd29feea6b25159e5e164746ca9_JaffaCakes118
-
Size
570KB
-
Sample
240328-s9s6jsah74
-
MD5
09a93bd29feea6b25159e5e164746ca9
-
SHA1
17f7fffc982a78aaaffb14f295088a03a4f13540
-
SHA256
50b9cf2c1eb6d95baedf2bdcc2366d0510ba78eea4b276331a4a639311612924
-
SHA512
2dd7b93a9a51bf6c97f0a77c3e2ab8320226bc24d6ae1682e4215e23ecfe6364b37f88356f1c115a7588a3a372ba2ac3509b427b909345cb819a5a1e8e153c69
-
SSDEEP
12288:M42NJ2iYSZLJLdvOSsnjS4csBrge6sf7:mYShhJLH4csTJz
Behavioral task
behavioral1
Sample
09a93bd29feea6b25159e5e164746ca9_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
09a93bd29feea6b25159e5e164746ca9_JaffaCakes118.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
09a93bd29feea6b25159e5e164746ca9_JaffaCakes118
-
Size
570KB
-
MD5
09a93bd29feea6b25159e5e164746ca9
-
SHA1
17f7fffc982a78aaaffb14f295088a03a4f13540
-
SHA256
50b9cf2c1eb6d95baedf2bdcc2366d0510ba78eea4b276331a4a639311612924
-
SHA512
2dd7b93a9a51bf6c97f0a77c3e2ab8320226bc24d6ae1682e4215e23ecfe6364b37f88356f1c115a7588a3a372ba2ac3509b427b909345cb819a5a1e8e153c69
-
SSDEEP
12288:M42NJ2iYSZLJLdvOSsnjS4csBrge6sf7:mYShhJLH4csTJz
Score10/10-
StormKitty payload
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
-