General
-
Target
0c699aa8699b1bccd7c223aaa47ffd0e_JaffaCakes118
-
Size
340KB
-
Sample
240328-wnnwgsce2t
-
MD5
0c699aa8699b1bccd7c223aaa47ffd0e
-
SHA1
f857cbb31706dd139c157b97fdbce968845d3f7b
-
SHA256
c5e30ba7109f8c474152f1a64dabe02e801f5ddc8313390954e1bbb5e04ce772
-
SHA512
73dd2b0bbf3fabc3a003da8afb47f740c54308985c9059759650763d02e08511cd47a43f44ff8546df470c6975247afbea09b281b3df3b4b63ef94b20450b8d9
-
SSDEEP
6144:uNOclyN4LZ+XgNCQxpepC/jwUMhHQ4Pt3EzO:FVyNAgNCGepC/qVQ4FmO
Static task
static1
Behavioral task
behavioral1
Sample
0c699aa8699b1bccd7c223aaa47ffd0e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c699aa8699b1bccd7c223aaa47ffd0e_JaffaCakes118.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
lokibot
http://136.243.159.53/~element/page.php?id=119
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
0c699aa8699b1bccd7c223aaa47ffd0e_JaffaCakes118
-
Size
340KB
-
MD5
0c699aa8699b1bccd7c223aaa47ffd0e
-
SHA1
f857cbb31706dd139c157b97fdbce968845d3f7b
-
SHA256
c5e30ba7109f8c474152f1a64dabe02e801f5ddc8313390954e1bbb5e04ce772
-
SHA512
73dd2b0bbf3fabc3a003da8afb47f740c54308985c9059759650763d02e08511cd47a43f44ff8546df470c6975247afbea09b281b3df3b4b63ef94b20450b8d9
-
SSDEEP
6144:uNOclyN4LZ+XgNCQxpepC/jwUMhHQ4Pt3EzO:FVyNAgNCGepC/qVQ4FmO
Score10/10-
Accesses Microsoft Outlook profiles
-