General
-
Target
fc0f81ddaf201fbba311b3be5bab3b89_JaffaCakes118
-
Size
160KB
-
Sample
240420-ghw8caag2w
-
MD5
fc0f81ddaf201fbba311b3be5bab3b89
-
SHA1
82a8aec6484b4c126ae8d74ac4ff9d53bf2770ca
-
SHA256
8ba45d92213e8236102e84d648758ed9bdcdf749c45dd4f3fdcb8c40edca27e7
-
SHA512
176ef2c6ce789fd0bd40b41631792c101f88e378c2848cb30f8a3828e67e2f6431f43b1d34e801e6910b0d689c3dc04200dd1f3b1ac1182e0c612330fb3ae297
-
SSDEEP
1536:M+1vdtQuQoq8eaVUFp/bPyJQe+qbOgjCLQIRtcABzuME38tsjUBqgrKGS:7tQuAkUFpvqbpCTbEvgrKGS
Static task
static1
Behavioral task
behavioral1
Sample
fc0f81ddaf201fbba311b3be5bab3b89_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
pony
http://72.37.220.10:8080/pony/gate.php
http://50.116.12.95/pony/gate.php
-
payload_url
http://www.elitp.com/osgut4G.exe
http://www.principecalcados.com/X7A.exe
Targets
-
-
Target
fc0f81ddaf201fbba311b3be5bab3b89_JaffaCakes118
-
Size
160KB
-
MD5
fc0f81ddaf201fbba311b3be5bab3b89
-
SHA1
82a8aec6484b4c126ae8d74ac4ff9d53bf2770ca
-
SHA256
8ba45d92213e8236102e84d648758ed9bdcdf749c45dd4f3fdcb8c40edca27e7
-
SHA512
176ef2c6ce789fd0bd40b41631792c101f88e378c2848cb30f8a3828e67e2f6431f43b1d34e801e6910b0d689c3dc04200dd1f3b1ac1182e0c612330fb3ae297
-
SSDEEP
1536:M+1vdtQuQoq8eaVUFp/bPyJQe+qbOgjCLQIRtcABzuME38tsjUBqgrKGS:7tQuAkUFpvqbpCTbEvgrKGS
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-