General
-
Target
57be051a2a20b292fc8cb67c4f31c4f9_JaffaCakes118
-
Size
563KB
-
Sample
240331-sgf1hsee73
-
MD5
57be051a2a20b292fc8cb67c4f31c4f9
-
SHA1
74c7c3e521bc681f0e18a90cd31cee1f37641598
-
SHA256
04ed65784009bd39c546c4a6473a44799d0444d40ff9796c2921a70db6ec2a72
-
SHA512
cbc1456dc1bff17d3fe3a64414cb58ba35821a152992f4de4e6a8e541e3882e62fbe787538945055a3c8249cb1d291dd03a2c58885bed1d3d4861b5a4f9a9121
-
SSDEEP
6144:cKheIEpyb/eDE6j87TZ48zMKf6ZyNN68M07+AGlqtIMdcJDhepYYX:nEpySIzCKf6ZyNx7/OqtIMyJDheuY
Static task
static1
Behavioral task
behavioral1
Sample
57be051a2a20b292fc8cb67c4f31c4f9_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
xloader
2.5
mexq
cyebang.com
hcswwsz.com
50003008.com
yfly624.xyz
trungtamhohap.xyz
sotlbb.com
bizhan69.com
brandmty.net
fucibou.xyz
orderinformantmailer.store
nobleminers.com
divinevoid.com
quickappraisal.net
adventuretravelsworld.com
ashainitiativemp.com
ikkbs-a02.com
rd26x.com
goraeda.com
abbastanza.info
andypartridge.photography
xn--aprendes-espaol-brb.com
jrceleste.com
bestwarsawhotels.com
fospine.online
rayofdesign.online
hablamarca.com
nichellejonesrealtor.com
zamarasystem.com
thepropertygoat.com
fightfigures.com
mxconglomerate.com
elecoder.com
mabnapakhsh.com
girlspiter.club
xn--lcka2cufqed6765c4ef1x1g.xyz
cancleaningpros.com
galestorm.net
besrbee.com
sjmdesignstudio.com
kickonlines.com
generateyourart.com
promiseface.com
searchingspacespot.com
jovemmilionario.com
paomovar.com
dogiadunggiare.online
uniqued.net
glassrootsstudio.com
rabenteec.com
asistente-ti.com
xn--l6qw76agwi5rjeuzk9q.com
azapsolutions.com
wmh3gk2fzw2m.biz
districonio.com
dapekdelivery.com
vintagepaseo.com
od0aew1pox.com
iphone13promax.design
texttheruffleddaisy.com
umdasch-lagertechnik.com
growthabove.com
eltacorancherofoodtruck.com
gafoodstamps.com
mzalluom.com
aliexpress-br.com
Targets
-
-
Target
57be051a2a20b292fc8cb67c4f31c4f9_JaffaCakes118
-
Size
563KB
-
MD5
57be051a2a20b292fc8cb67c4f31c4f9
-
SHA1
74c7c3e521bc681f0e18a90cd31cee1f37641598
-
SHA256
04ed65784009bd39c546c4a6473a44799d0444d40ff9796c2921a70db6ec2a72
-
SHA512
cbc1456dc1bff17d3fe3a64414cb58ba35821a152992f4de4e6a8e541e3882e62fbe787538945055a3c8249cb1d291dd03a2c58885bed1d3d4861b5a4f9a9121
-
SSDEEP
6144:cKheIEpyb/eDE6j87TZ48zMKf6ZyNN68M07+AGlqtIMdcJDhepYYX:nEpySIzCKf6ZyNx7/OqtIMyJDheuY
-
Xloader payload
-
Suspicious use of SetThreadContext
-