General
-
Target
f83c7eb1b65ad46bc00d8c95ce4c1275_JaffaCakes118
-
Size
333KB
-
Sample
240418-r85mhsgb58
-
MD5
f83c7eb1b65ad46bc00d8c95ce4c1275
-
SHA1
d23a093a7319ebf401f19c5412eb8953018b7930
-
SHA256
4dec8e046a24e264e33b75cc22fb5b259aafbec1e3eac9d116fa19c3e411b0a4
-
SHA512
5a1e8e2e9a70082897e3ed24c3a4afc3aefab835e3612b9a22fc932b04d7feeca1f78c59e2f9a3fb0cee20b21e3ea1e46fc2ec9ac921b49dabfd873ef4426cac
-
SSDEEP
3072:lR7BS41Ay2ZETBRSuJIV0OuFxElFa+rxjylA4blz5PCHf7VfAwt+gbEUUN83FNg5:+yoiFOa+5uzxz5PQ7VfAIJEUaqFx1
Static task
static1
Behavioral task
behavioral1
Sample
f83c7eb1b65ad46bc00d8c95ce4c1275_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f83c7eb1b65ad46bc00d8c95ce4c1275_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
lokibot
http://checkvim.com/ga13/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
f83c7eb1b65ad46bc00d8c95ce4c1275_JaffaCakes118
-
Size
333KB
-
MD5
f83c7eb1b65ad46bc00d8c95ce4c1275
-
SHA1
d23a093a7319ebf401f19c5412eb8953018b7930
-
SHA256
4dec8e046a24e264e33b75cc22fb5b259aafbec1e3eac9d116fa19c3e411b0a4
-
SHA512
5a1e8e2e9a70082897e3ed24c3a4afc3aefab835e3612b9a22fc932b04d7feeca1f78c59e2f9a3fb0cee20b21e3ea1e46fc2ec9ac921b49dabfd873ef4426cac
-
SSDEEP
3072:lR7BS41Ay2ZETBRSuJIV0OuFxElFa+rxjylA4blz5PCHf7VfAwt+gbEUUN83FNg5:+yoiFOa+5uzxz5PQ7VfAIJEUaqFx1
Score10/10-
Accesses Microsoft Outlook profiles
-