General
- Target 900318ec384b6322c5b3fb1c335ef9fd_JaffaCakes118
- Size 339KB
- Sample240402-spdv5aea3t
- SHA256 3236d82523149bd761bd3908a7fcefcc3a1f96e08c4914f7da8dc0ee0cdfcf8e
- MD5 900318ec384b6322c5b3fb1c335ef9fd
- SHA1 b03da7bad232fc601e8ed1be5340331b69180142
- SHA512 113305e136a5601d273959ed3c332af2adcb11a2188203c6750154c9a5306862c7f65f9249919d474cab91b002e7edac6ec84b8c4d1f06186159471d00eaa011
- SSDEEP 6144:C2gWp3tjRdhQkqb1s0eRaNPiyoZpFXkafxvcozQ:C43tj9Pss0GaNP+ZpFUafdS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
900318ec384b6322c5b3fb1c335ef9fd_JaffaCakes118.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
900318ec384b6322c5b3fb1c335ef9fd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Botnet
-
pub3
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://gmpeople.com/upload/
-
http://mile48.com/upload/
-
http://lecanardstsornin.com/upload/
-
http://m3600.com/upload/
-
http://camasirx.com/upload/
rc4.i32
rc4.i32
Targets
-
- Target 900318ec384b6322c5b3fb1c335ef9fd_JaffaCakes118
- Size 339KB
- SHA256 3236d82523149bd761bd3908a7fcefcc3a1f96e08c4914f7da8dc0ee0cdfcf8e
- MD5 900318ec384b6322c5b3fb1c335ef9fd
- SHA1 b03da7bad232fc601e8ed1be5340331b69180142
- SHA512 113305e136a5601d273959ed3c332af2adcb11a2188203c6750154c9a5306862c7f65f9249919d474cab91b002e7edac6ec84b8c4d1f06186159471d00eaa011
- SSDEEP 6144:C2gWp3tjRdhQkqb1s0eRaNPiyoZpFXkafxvcozQ:C43tj9Pss0GaNP+ZpFUafdS
- MD5 SHA1 SHA512 SSDEEP
Score10/10Deletes itself
Executes dropped EXE