General

  • Target

    f2c9722cdc072f60888945a6696c007f_JaffaCakes118

  • Size

    94KB

  • MD5

    f2c9722cdc072f60888945a6696c007f

  • SHA1

    6d34522ee16d8a6cd1c3b0bfc566b70b525d8063

  • SHA256

    fa0c9fce28ae9ac1db38ffd8ba23af2f2683e6737fec23246d4f1d2d903dab41

  • SHA512

    97e2149444a66cc1b067849d23565800edf31da2fffc8c3531c1392a417c02407f158c25400c5ff16b9e6bde5afdc29eb947738d3f3e572b476c6d097730bdaf

  • SSDEEP

    1536:fyY2LdJsg+dsRbGJyq2Ld5sg+dsRbGByY2LdJyg+dsRbGMn+/P4AJUQHZTFUMz8j:fT4mjx4WrT4Eq+/P4AJUQHZTFUMz8YHo

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://pakmin.yourfreehosting.net/perkakas/cmd.txt?

exe.dropper

http://uaedesign.com/config/idfx.txt?

exe.dropper

http://legalref.ru/cyberz/logs/fxscanlogger.php?

exe.dropper

http://brojolelle.org/bnc/cerewet.txt?

exe.dropper

http://legalref.ru/cyberz/installpsy.txt?

exe.dropper

http://legalref.ru/cyberz/logs/target.txt

exe.dropper

http://localhost/toolz/id.txt?

exe.dropper

http://localhost/toolz/fxscanlogger.php?

exe.dropper

http://localhost/toolz/uploadshell.txt?

exe.dropper

http://localhost/toolz/installpsy.txt?

exe.dropper

http://localhost/toolz/target.txt

Signatures

Files

  • f2c9722cdc072f60888945a6696c007f_JaffaCakes118
    .ps1