General
- Target 600a18d8f3a33835b0bffff6263886ae_JaffaCakes118
- Size 301KB
- Sample240331-2h24taee52
- SHA256 a21ea821be6b36a22a8f8ea4dd5826d389d31445936581d28b17a56ccbb120a2
- MD5 600a18d8f3a33835b0bffff6263886ae
- SHA1 09c910376befe91f7b7e63b56ae4a31583b0be0a
- SHA512 dd29ebf0aca038b6da897d8a404d3ead17004a1089b82bc6e1f0443f9840b78032773d541110b39b08d2dd45948ac6ccd39fca2b07015dfc939ac68444509bda
- SSDEEP 6144:dfLBQ5nn4xmGjViGpoBJKAsZEVY1T1fn0:xMnFGjVikoBLsZkA1n
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
600a18d8f3a33835b0bffff6263886ae_JaffaCakes118.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
600a18d8f3a33835b0bffff6263886ae_JaffaCakes118.exe
Resource
win10v2004-20240226-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://gmpeople.com/upload/
-
http://mile48.com/upload/
-
http://lecanardstsornin.com/upload/
-
http://m3600.com/upload/
-
http://camasirx.com/upload/
rc4.i32
rc4.i32
Targets
-
- Target 600a18d8f3a33835b0bffff6263886ae_JaffaCakes118
- Size 301KB
- SHA256 a21ea821be6b36a22a8f8ea4dd5826d389d31445936581d28b17a56ccbb120a2
- MD5 600a18d8f3a33835b0bffff6263886ae
- SHA1 09c910376befe91f7b7e63b56ae4a31583b0be0a
- SHA512 dd29ebf0aca038b6da897d8a404d3ead17004a1089b82bc6e1f0443f9840b78032773d541110b39b08d2dd45948ac6ccd39fca2b07015dfc939ac68444509bda
- SSDEEP 6144:dfLBQ5nn4xmGjViGpoBJKAsZEVY1T1fn0:xMnFGjVikoBLsZkA1n
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Deletes itself