General
-
Target
fef2dae42c64144984a9669f44d19dd3_JaffaCakes118
-
Size
160KB
-
Sample
240421-k7hb9sff85
-
MD5
fef2dae42c64144984a9669f44d19dd3
-
SHA1
65526c2ee092ba842d49f953a087d925a52a7066
-
SHA256
bb7d73c3cb79d4ad226f35b6ebb13a2d3ea8335c4b42ee5821696d20f02e706d
-
SHA512
53d3521c6a6572f537626494fabad5b6445cdab7644570369e7692fe02f86d2342b06f8abf41115a16582ce361b4c97bb5b62c53fc75aca14cb0a2f26aea5527
-
SSDEEP
1536:U+RnrWBebtEa1aTHtZhy8X7u9qmZpewz8jH4/5rQIJZtcABzuSbCD0Qm5xKKC:sBeRGzhy8ruJz8E/5zJzpuexKKC
Static task
static1
Behavioral task
behavioral1
Sample
fef2dae42c64144984a9669f44d19dd3_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Extracted
pony
http://38.111.240.3:8080/pony/gate.php
http://ks384721.kimsufi.com:81/pony/gate.php
-
payload_url
http://ftp.ilovepoodang.com/8YFat3J2/QhV.exe
http://valedosprofetas.com.br/2cJPPvM2/m6tu21vP.exe
http://hintonline.org/gycEsXRS/SyKtnVYK.exe
Targets
-
-
Target
fef2dae42c64144984a9669f44d19dd3_JaffaCakes118
-
Size
160KB
-
MD5
fef2dae42c64144984a9669f44d19dd3
-
SHA1
65526c2ee092ba842d49f953a087d925a52a7066
-
SHA256
bb7d73c3cb79d4ad226f35b6ebb13a2d3ea8335c4b42ee5821696d20f02e706d
-
SHA512
53d3521c6a6572f537626494fabad5b6445cdab7644570369e7692fe02f86d2342b06f8abf41115a16582ce361b4c97bb5b62c53fc75aca14cb0a2f26aea5527
-
SSDEEP
1536:U+RnrWBebtEa1aTHtZhy8X7u9qmZpewz8jH4/5rQIJZtcABzuSbCD0Qm5xKKC:sBeRGzhy8ruJz8E/5zJzpuexKKC
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-