General
-
Target
f7c698eab71c220e1a698b32727534d2_JaffaCakes118
-
Size
686KB
-
Sample
240418-l7m37aaa42
-
MD5
f7c698eab71c220e1a698b32727534d2
-
SHA1
42e7e215dedc10c21862653015e1292c1c01d0f2
-
SHA256
509d77d4af8babe41e4c605a3fe4f8f24ff86c987ec95f3ca1916e525356c3e6
-
SHA512
6146e1bfcf0fc9d2aafc7f939f0210fdb9faf3b771f856e617edb08d0097c8c311882a94b389df56176dd73802cdebfd9d3898b89a035ee0b67b02b077bb111f
-
SSDEEP
12288:bGcRKryoBsEb+sk7sufTxtjhC0UkZlzoOaqFgGrctPMmYwU0:WryoBsEbZKlCrkZaOaQgltE2
Static task
static1
Behavioral task
behavioral1
Sample
f7c698eab71c220e1a698b32727534d2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f7c698eab71c220e1a698b32727534d2_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
tidusx12
Targets
-
-
Target
f7c698eab71c220e1a698b32727534d2_JaffaCakes118
-
Size
686KB
-
MD5
f7c698eab71c220e1a698b32727534d2
-
SHA1
42e7e215dedc10c21862653015e1292c1c01d0f2
-
SHA256
509d77d4af8babe41e4c605a3fe4f8f24ff86c987ec95f3ca1916e525356c3e6
-
SHA512
6146e1bfcf0fc9d2aafc7f939f0210fdb9faf3b771f856e617edb08d0097c8c311882a94b389df56176dd73802cdebfd9d3898b89a035ee0b67b02b077bb111f
-
SSDEEP
12288:bGcRKryoBsEb+sk7sufTxtjhC0UkZlzoOaqFgGrctPMmYwU0:WryoBsEbZKlCrkZaOaQgltE2
Score10/10-
Drops file in Drivers directory
-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Drops file in System32 directory
-