General
-
Target
ad560462d9201c1668508aab714d1d8e_JaffaCakes118
-
Size
347KB
-
Sample
240404-c48q2sch72
-
MD5
ad560462d9201c1668508aab714d1d8e
-
SHA1
7d407593d270085286b22e82e07f0b6f33c23f5b
-
SHA256
31b01b6ab814a5a6c5125f381988cc1358306d5ab1cb9c3b6602510c53fcdb9b
-
SHA512
374bf8bb27641946518f2c8416af4f94ca1b8e40d72870b7d91e6cc651f01d05b40ef57d4f6f3e663303c52f3052e67cd9a35130252ec2a04a11532a35538dcc
-
SSDEEP
6144:m0IMoNmL7x4SVXSabPTeboxqoTkEaWra:OFNmLKSVXJbPT+4xr
Static task
static1
Behavioral task
behavioral1
Sample
ad560462d9201c1668508aab714d1d8e_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
qakbot
401.138
biden03
1614851222
81.97.154.100:443
92.59.35.196:2222
197.161.154.132:443
75.136.26.147:443
71.117.132.169:443
78.63.226.32:443
193.248.221.184:2222
75.67.192.125:443
83.110.9.71:2222
47.22.148.6:443
89.3.198.238:443
2.232.253.79:995
45.63.107.192:2222
207.246.77.75:443
45.32.211.207:8443
207.246.77.75:8443
45.32.211.207:995
149.28.98.196:443
149.28.99.97:2222
149.28.98.196:995
149.28.101.90:443
45.77.117.108:443
45.77.117.108:8443
144.202.38.185:2222
144.202.38.185:995
144.202.38.185:443
149.28.101.90:2222
207.246.77.75:2222
207.246.77.75:995
45.77.115.208:2222
45.77.115.208:8443
207.246.116.237:2222
207.246.116.237:443
207.246.116.237:8443
45.77.117.108:995
149.28.98.196:2222
149.28.99.97:995
149.28.101.90:8443
149.28.101.90:995
45.77.115.208:995
45.63.107.192:443
45.32.211.207:443
207.246.116.237:995
45.77.117.108:2222
149.28.99.97:443
45.77.115.208:443
45.32.211.207:2222
68.186.192.69:443
105.198.236.101:443
125.63.101.62:443
174.104.22.30:443
216.201.162.158:443
70.168.130.172:995
71.41.184.10:3389
75.136.40.155:443
80.11.173.82:8443
119.157.106.105:3389
24.117.107.120:443
140.82.49.12:443
77.211.30.202:995
24.95.61.62:443
24.50.118.93:443
67.165.206.193:993
71.199.192.62:443
59.90.246.200:443
172.78.30.215:443
85.52.72.32:2222
77.27.204.204:995
81.214.126.173:2222
83.110.103.152:443
217.165.22.188:443
144.139.47.206:443
71.163.223.159:443
90.65.236.181:2222
115.133.243.6:443
196.151.252.84:443
45.118.216.157:443
113.22.175.141:443
76.94.200.148:995
24.43.22.218:993
76.25.142.196:443
173.21.10.71:2222
144.139.166.18:443
45.46.53.140:2222
71.74.12.34:443
203.198.96.249:443
189.222.59.177:443
74.222.204.82:995
199.19.117.131:443
197.45.110.165:995
189.222.216.44:443
173.25.45.66:443
186.31.77.42:443
71.197.126.250:443
83.196.56.65:2222
98.240.24.57:443
142.117.191.18:2222
189.146.183.105:443
67.6.12.4:443
86.220.62.251:2222
108.46.145.30:443
78.97.207.104:443
24.55.112.61:443
32.210.98.6:443
181.48.190.78:443
95.77.223.148:443
109.12.111.14:443
151.205.102.42:443
187.250.238.164:995
188.26.91.212:443
172.115.177.204:2222
74.68.144.202:443
75.118.1.141:443
106.51.85.162:443
79.115.174.55:443
24.139.72.117:443
82.12.157.95:995
195.43.173.70:443
72.240.200.181:2222
209.210.187.52:995
98.252.118.134:443
24.229.150.54:995
89.137.211.239:995
190.85.91.154:443
2.7.116.188:2222
80.7.129.64:995
189.210.115.207:443
213.60.147.140:443
72.252.201.69:443
183.82.100.249:2222
67.8.103.21:443
176.181.247.197:443
196.221.207.137:995
78.180.179.136:443
202.184.20.119:443
86.236.77.68:2222
125.209.114.182:995
84.72.35.226:443
94.53.92.42:443
98.192.185.86:443
65.27.228.247:443
122.148.156.131:995
71.63.120.101:443
84.247.55.190:8443
82.127.125.209:990
197.51.82.72:443
156.223.164.75:443
217.133.54.140:32100
105.198.236.99:443
108.29.32.251:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
ad560462d9201c1668508aab714d1d8e_JaffaCakes118
-
Size
347KB
-
MD5
ad560462d9201c1668508aab714d1d8e
-
SHA1
7d407593d270085286b22e82e07f0b6f33c23f5b
-
SHA256
31b01b6ab814a5a6c5125f381988cc1358306d5ab1cb9c3b6602510c53fcdb9b
-
SHA512
374bf8bb27641946518f2c8416af4f94ca1b8e40d72870b7d91e6cc651f01d05b40ef57d4f6f3e663303c52f3052e67cd9a35130252ec2a04a11532a35538dcc
-
SSDEEP
6144:m0IMoNmL7x4SVXSabPTeboxqoTkEaWra:OFNmLKSVXJbPT+4xr
-
Loads dropped DLL
-