General
-
Target
f69ee7ffe8ea8fbbe759b9aa77db569e_JaffaCakes118
-
Size
177KB
-
Sample
240417-1fhrqaga2z
-
MD5
f69ee7ffe8ea8fbbe759b9aa77db569e
-
SHA1
0d716caf12b2bf542f2b3d875f559769bb26ef23
-
SHA256
7aa6fc3093eac0b24a75d42017f1a99d310be379235cdc3c9813f1fbe8295b1a
-
SHA512
2d3ea13fd9a4188d0733ec6aa09077bc2befa395aa935287b190aa02d214f9e3784efe7a2091578ebb145b4db41b5b331ee1d9bc11e1e8f5c7d8a0a46aa2c9b3
-
SSDEEP
3072:/+WglLyK+8962+EVO+95N/a5heHwhZoWC9sI5/DuT61m:/DKX/dM8HwhZU9sI5/
Static task
static1
Behavioral task
behavioral1
Sample
f69ee7ffe8ea8fbbe759b9aa77db569e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f69ee7ffe8ea8fbbe759b9aa77db569e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
smokeloader
2020
http://readinglistforaugust1.xyz/
http://readinglistforaugust2.xyz/
http://readinglistforaugust3.xyz/
http://readinglistforaugust4.xyz/
http://readinglistforaugust5.xyz/
http://readinglistforaugust6.xyz/
http://readinglistforaugust7.xyz/
http://readinglistforaugust8.xyz/
http://readinglistforaugust9.xyz/
http://readinglistforaugust10.xyz/
http://readinglistforaugust1.site/
http://readinglistforaugust2.site/
http://readinglistforaugust3.site/
http://readinglistforaugust4.site/
http://readinglistforaugust5.site/
http://readinglistforaugust6.site/
http://readinglistforaugust7.site/
http://readinglistforaugust8.site/
http://readinglistforaugust9.site/
http://readinglistforaugust10.site/
http://readinglistforaugust1.club/
http://readinglistforaugust2.club/
http://readinglistforaugust3.club/
http://readinglistforaugust4.club/
http://readinglistforaugust5.club/
http://readinglistforaugust6.club/
http://readinglistforaugust7.club/
http://readinglistforaugust8.club/
http://readinglistforaugust9.club/
http://readinglistforaugust10.club/
Targets
-
-
Target
f69ee7ffe8ea8fbbe759b9aa77db569e_JaffaCakes118
-
Size
177KB
-
MD5
f69ee7ffe8ea8fbbe759b9aa77db569e
-
SHA1
0d716caf12b2bf542f2b3d875f559769bb26ef23
-
SHA256
7aa6fc3093eac0b24a75d42017f1a99d310be379235cdc3c9813f1fbe8295b1a
-
SHA512
2d3ea13fd9a4188d0733ec6aa09077bc2befa395aa935287b190aa02d214f9e3784efe7a2091578ebb145b4db41b5b331ee1d9bc11e1e8f5c7d8a0a46aa2c9b3
-
SSDEEP
3072:/+WglLyK+8962+EVO+95N/a5heHwhZoWC9sI5/DuT61m:/DKX/dM8HwhZU9sI5/
Score10/10-
Deletes itself
-
Suspicious use of SetThreadContext
-