General
-
Target
f2d4c37039aa66843a3dab47842e7f23_JaffaCakes118
-
Size
735KB
-
Sample
240416-gl6wyscg4v
-
MD5
f2d4c37039aa66843a3dab47842e7f23
-
SHA1
38260424754ab0deb78f2a9967d95727781776bb
-
SHA256
b37f9988861fbdcdf6d9767818f6099a4f6773553bde2fe24c075e8405fbf869
-
SHA512
bfcfeb2dcf9b21fad3dda44fcfe293b3b6e8b2d0b5ae8fca5271172c8cf9653e88408eca41c5687c08af902c5de37334d157ca406fcf8b64dbe5138135501198
-
SSDEEP
12288:9GFN7CUrZoUw/JVitqCejgVXo7owxI+WaSvoIy4F+1h0gD6H29a4:u7rloUw/D8Xo7oIuRngD6H6
Static task
static1
Behavioral task
behavioral1
Sample
f2d4c37039aa66843a3dab47842e7f23_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
vidar
40.2
517
https://kipriauka.tumblr.com/
-
profile_id
517
Targets
-
-
Target
f2d4c37039aa66843a3dab47842e7f23_JaffaCakes118
-
Size
735KB
-
MD5
f2d4c37039aa66843a3dab47842e7f23
-
SHA1
38260424754ab0deb78f2a9967d95727781776bb
-
SHA256
b37f9988861fbdcdf6d9767818f6099a4f6773553bde2fe24c075e8405fbf869
-
SHA512
bfcfeb2dcf9b21fad3dda44fcfe293b3b6e8b2d0b5ae8fca5271172c8cf9653e88408eca41c5687c08af902c5de37334d157ca406fcf8b64dbe5138135501198
-
SSDEEP
12288:9GFN7CUrZoUw/JVitqCejgVXo7owxI+WaSvoIy4F+1h0gD6H29a4:u7rloUw/D8Xo7oIuRngD6H6
-
Vidar Stealer
-
Suspicious use of SetThreadContext
-