General
-
Target
326879d0158d92efc02be27a534e2af4_JaffaCakes118
-
Size
253KB
-
Sample
240330-d2vbbaga8v
-
MD5
326879d0158d92efc02be27a534e2af4
-
SHA1
f0a4055436bf4ab684f0ff38a0af2d87ef792069
-
SHA256
b17b8be05fc8389990be623a727369826383bfc2fb33693943f208faa184ff40
-
SHA512
950cc47ac43379abe7ba63de202543748d414969f48996e5e7082eaf79f27c9767980354c0483803881cbe88ccbee18a28037d04142274ff2aa14a394003a389
-
SSDEEP
6144:wBlL/cwA22vGb3UX6hyXVBG1amR0wlWg+BYazEzjAQBc:CewAFX6koamR0wtNi
Static task
static1
Behavioral task
behavioral1
Sample
326879d0158d92efc02be27a534e2af4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
326879d0158d92efc02be27a534e2af4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/jmmnbh.dll
Resource
win7-20240319-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/jmmnbh.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
xloader
2.5
u5eh
tryafaq.com
bobcathntshop.com
oglead.com
026skz.xyz
brasbux.com
adna17.com
noveltyrofjiy.xyz
realestatecompanys.com
leman-web.com
df5686.com
jonathonhawkins.com
juliedominyfloralartistry.com
classyeventsco.com
aquaticatt.com
iotworld.xyz
hoc8.com
disposablediapers.store
peregovorim.online
advancebits.club
getaburialplan.com
tiger-trails.com
dnbaba.com
492981.com
eclipse-electrical-euless.com
cassandracchase.com
healthrightmeds.club
permkray.club
tawazoun-dz.com
extrabladet.com
offmanage.com
peoplexplants.com
mumkungiyim.com
personal-email-office-mgt.com
bjmysa.com
hopshomes.com
cnj-power.com
trendproduct.tech
chauffeuredaustralia.online
176ssjp0033.xyz
52juns.com
rewriringcanada.com
seabourneboats.com
sevensummittrek.com
retalent.agency
lz4ios.cloud
mindandbodyalignment.com
bedrijfmail-trk.com
bashmoney.net
xc3654.com
infiteltech.com
sh-hywz.com
huataiqche.com
grannyh.com
devinwithani.com
kingstons.info
fakedocshyundaigiveaway.com
bigsyncmusic.info
predstavnuk.com
frontiervalley8.com
timdpr.com
smartgymadmin.com
brsgeniusschool.com
tuckertractorworks.com
espchange.com
retonamoss.com
Targets
-
-
Target
326879d0158d92efc02be27a534e2af4_JaffaCakes118
-
Size
253KB
-
MD5
326879d0158d92efc02be27a534e2af4
-
SHA1
f0a4055436bf4ab684f0ff38a0af2d87ef792069
-
SHA256
b17b8be05fc8389990be623a727369826383bfc2fb33693943f208faa184ff40
-
SHA512
950cc47ac43379abe7ba63de202543748d414969f48996e5e7082eaf79f27c9767980354c0483803881cbe88ccbee18a28037d04142274ff2aa14a394003a389
-
SSDEEP
6144:wBlL/cwA22vGb3UX6hyXVBG1amR0wlWg+BYazEzjAQBc:CewAFX6koamR0wtNi
-
Xloader payload
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-
-
-
Target
$PLUGINSDIR/jmmnbh.dll
-
Size
33KB
-
MD5
3fe6933172cb97cd2f22413f795660ba
-
SHA1
1ee9dfeb2329eb108ec654db3e87f1e698e0e731
-
SHA256
f0ed5b1f290b36168d3cdce44b29a92dde64b558b350576431983f902fedeb8e
-
SHA512
e946a1b33031678108f325d4464b6fd6ff889cd397c2eb2e51347f0a9e33d3837ca2b020cfb9d34bd24ae7a4864b0549f2ab97fc560f39f00c0b82b17f054052
-
SSDEEP
384:Io2inGgH1YPO7bfcWHRiMc9Zwg/XpvK5X/XJm5d/rgjQrX+dtWJdYLeWU9TkNNWt:H26j710wxO/rgjQrYtWLoSYlPz+
Score3/10 -