General
-
Target
2c25677594d9f6c2e50ade274357d4e6_JaffaCakes118
-
Size
310KB
-
Sample
240329-zbd3ashb6z
-
MD5
2c25677594d9f6c2e50ade274357d4e6
-
SHA1
cd3cfda94dbfc0e6cb2f8f1e0740503eed4505f1
-
SHA256
218ae2e9ccd0d778ca78c7aa8e9fd7101819507d0f9da4bfbc40687063bd7fd4
-
SHA512
adc8cf97850f2127caf4266b6af7be0e21df12dd48819dd05a1c60dfba2799d9fad8e42ed63c7196dc99608b4adcadb9c573b586d6d67c8fc3e0d1cdf6e20686
-
SSDEEP
6144:MFpSab31KeVbae9j9GavOuHsppLbsmAcQUtPgNq:MFpHbEeZ9RGaGJppLHlQUtP0
Static task
static1
Behavioral task
behavioral1
Sample
2c25677594d9f6c2e50ade274357d4e6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2c25677594d9f6c2e50ade274357d4e6_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
smokeloader
2020
http://honawey7.xyz/
http://wijibui0.xyz/
http://hefahei6.xyz/
http://pipevai4.xyz/
http://nalirou7.xyz/
http://xacokuo8.xyz/
http://hajezey1.xyz/
http://gejajoo7.xyz/
http://sysaheu9.xyz/
http://rixoxeu9.xyz/
Targets
-
-
Target
2c25677594d9f6c2e50ade274357d4e6_JaffaCakes118
-
Size
310KB
-
MD5
2c25677594d9f6c2e50ade274357d4e6
-
SHA1
cd3cfda94dbfc0e6cb2f8f1e0740503eed4505f1
-
SHA256
218ae2e9ccd0d778ca78c7aa8e9fd7101819507d0f9da4bfbc40687063bd7fd4
-
SHA512
adc8cf97850f2127caf4266b6af7be0e21df12dd48819dd05a1c60dfba2799d9fad8e42ed63c7196dc99608b4adcadb9c573b586d6d67c8fc3e0d1cdf6e20686
-
SSDEEP
6144:MFpSab31KeVbae9j9GavOuHsppLbsmAcQUtPgNq:MFpHbEeZ9RGaGJppLHlQUtP0
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-