General
-
Target
67c974fb4dfbb10dfe7d2a35662649eb_JaffaCakes118
-
Size
332KB
-
Sample
240401-e5mw3sea32
-
MD5
67c974fb4dfbb10dfe7d2a35662649eb
-
SHA1
c93ec0869a8ab268f1adc18443c6878bde1d9b17
-
SHA256
6c2ad98af84288aff6f49ae92f9f71befbfaa4ac35d1a05b1441f1ce15124ee0
-
SHA512
4836176440bb0d7ec531ae39f10c60d7011d43430276b5fb514178b23590f552b1b08fcf9c06c15d95bf5e93ff4512bbf770e6d176b1f3fd53e5a4038ab46108
-
SSDEEP
6144:p+Lc9183wQ2MWjBdAlKQLUOGEggDd0p8jwjzricplgKywSahTBkZRk:p+Y9183ZaBdiKQCEggZpjw3ricEKBSE6
Static task
static1
Behavioral task
behavioral1
Sample
67c974fb4dfbb10dfe7d2a35662649eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67c974fb4dfbb10dfe7d2a35662649eb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
smokeloader
2020
http://honawey7.top/
http://wijibui0.top/
http://hefahei6.top/
http://pipevai4.top/
http://nalirou7.top/
Targets
-
-
Target
67c974fb4dfbb10dfe7d2a35662649eb_JaffaCakes118
-
Size
332KB
-
MD5
67c974fb4dfbb10dfe7d2a35662649eb
-
SHA1
c93ec0869a8ab268f1adc18443c6878bde1d9b17
-
SHA256
6c2ad98af84288aff6f49ae92f9f71befbfaa4ac35d1a05b1441f1ce15124ee0
-
SHA512
4836176440bb0d7ec531ae39f10c60d7011d43430276b5fb514178b23590f552b1b08fcf9c06c15d95bf5e93ff4512bbf770e6d176b1f3fd53e5a4038ab46108
-
SSDEEP
6144:p+Lc9183wQ2MWjBdAlKQLUOGEggDd0p8jwjzricplgKywSahTBkZRk:p+Y9183ZaBdiKQCEggZpjw3ricEKBSE6
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-