General
- Target d6f3cea8a3dc6d6a9077bd68c8f9fa06_JaffaCakes118
- Size 844KB
- Sample240405-sb53fsfe54
- SHA256 3495d37af88a1170f33e6d87645e80c90b5a6f5a87ceed87498173b720b6a583
- MD5 d6f3cea8a3dc6d6a9077bd68c8f9fa06
- SHA1 9d88822ce30b309cef6cef9a10217fa2488281cd
- SHA512 a1c51b09e9676c9ebbf78deab0cbea493b5f41abf92314fc97448d325573cb91da985f66e9667b94964f5142ac7bb3c4a035feb8af736ea787e0b3b632e15e18
- SSDEEP 12288:qN8p9LFWpGt1onBuHKw4rEFQWXDThdPTTQBC0vjuY58GYspGcGQk/wybqelq7tz2:8IMpyojwSEFQMKJFq
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d6f3cea8a3dc6d6a9077bd68c8f9fa06_JaffaCakes118.exe
Resource
win7-20240220-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d6f3cea8a3dc6d6a9077bd68c8f9fa06_JaffaCakes118
- Size 844KB
- SHA256 3495d37af88a1170f33e6d87645e80c90b5a6f5a87ceed87498173b720b6a583
- MD5 d6f3cea8a3dc6d6a9077bd68c8f9fa06
- SHA1 9d88822ce30b309cef6cef9a10217fa2488281cd
- SHA512 a1c51b09e9676c9ebbf78deab0cbea493b5f41abf92314fc97448d325573cb91da985f66e9667b94964f5142ac7bb3c4a035feb8af736ea787e0b3b632e15e18
- SSDEEP 12288:qN8p9LFWpGt1onBuHKw4rEFQWXDThdPTTQBC0vjuY58GYspGcGQk/wybqelq7tz2:8IMpyojwSEFQMKJFq
- MD5 SHA1 SHA512 SSDEEP
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.