General
-
Target
4a6d923f2f8f1efcfcb99ef933180483_JaffaCakes118
-
Size
311KB
-
Sample
240331-cmt7bsbh6x
-
MD5
4a6d923f2f8f1efcfcb99ef933180483
-
SHA1
e84d55aacbf51e6424dc683ee762a2975151b018
-
SHA256
b9d681493294ae866c60e0057bb4e9603edc4456c3a2006bf7646a2fa12116fa
-
SHA512
324d4ca02cbb2d61fa4a973f6ad85e482d23861e70d7c9538b65bc327e7fd663ff9c02208d058db4aca1b5be88100def820c6dcea6998c1bbb5822dcbdd3d5ba
-
SSDEEP
6144:IszqpXHHe9Dc/QA1ifvNYGXp1ObZOjOrgqQ3vdq:RzqhHd/QqifFTp1O0CrgqQfA
Static task
static1
Behavioral task
behavioral1
Sample
4a6d923f2f8f1efcfcb99ef933180483_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a6d923f2f8f1efcfcb99ef933180483_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
smokeloader
2020
http://honawey7.xyz/
http://wijibui0.xyz/
http://hefahei6.xyz/
http://pipevai4.xyz/
http://nalirou7.xyz/
http://xacokuo8.xyz/
http://hajezey1.xyz/
http://gejajoo7.xyz/
http://sysaheu9.xyz/
http://rixoxeu9.xyz/
Targets
-
-
Target
4a6d923f2f8f1efcfcb99ef933180483_JaffaCakes118
-
Size
311KB
-
MD5
4a6d923f2f8f1efcfcb99ef933180483
-
SHA1
e84d55aacbf51e6424dc683ee762a2975151b018
-
SHA256
b9d681493294ae866c60e0057bb4e9603edc4456c3a2006bf7646a2fa12116fa
-
SHA512
324d4ca02cbb2d61fa4a973f6ad85e482d23861e70d7c9538b65bc327e7fd663ff9c02208d058db4aca1b5be88100def820c6dcea6998c1bbb5822dcbdd3d5ba
-
SSDEEP
6144:IszqpXHHe9Dc/QA1ifvNYGXp1ObZOjOrgqQ3vdq:RzqhHd/QqifFTp1O0CrgqQfA
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-