Static task
static1
Behavioral task
behavioral1
Sample
f2c9722cdc072f60888945a6696c007f_JaffaCakes118.ps1
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2c9722cdc072f60888945a6696c007f_JaffaCakes118.ps1
Resource
win10v2004-20240412-en
General
-
Target
f2c9722cdc072f60888945a6696c007f_JaffaCakes118
-
Size
94KB
-
MD5
f2c9722cdc072f60888945a6696c007f
-
SHA1
6d34522ee16d8a6cd1c3b0bfc566b70b525d8063
-
SHA256
fa0c9fce28ae9ac1db38ffd8ba23af2f2683e6737fec23246d4f1d2d903dab41
-
SHA512
97e2149444a66cc1b067849d23565800edf31da2fffc8c3531c1392a417c02407f158c25400c5ff16b9e6bde5afdc29eb947738d3f3e572b476c6d097730bdaf
-
SSDEEP
1536:fyY2LdJsg+dsRbGJyq2Ld5sg+dsRbGByY2LdJyg+dsRbGMn+/P4AJUQHZTFUMz8j:fT4mjx4WrT4Eq+/P4AJUQHZTFUMz8YHo
Malware Config
Extracted
http://pakmin.yourfreehosting.net/perkakas/cmd.txt?
http://uaedesign.com/config/idfx.txt?
http://legalref.ru/cyberz/logs/fxscanlogger.php?
http://brojolelle.org/bnc/cerewet.txt?
http://legalref.ru/cyberz/installpsy.txt?
http://legalref.ru/cyberz/logs/target.txt
http://localhost/toolz/id.txt?
http://localhost/toolz/fxscanlogger.php?
http://localhost/toolz/uploadshell.txt?
http://localhost/toolz/installpsy.txt?
http://localhost/toolz/target.txt
Signatures
Files
-
f2c9722cdc072f60888945a6696c007f_JaffaCakes118.ps1