General
-
Target
ff643925ab1766e8824df0ea24bd360d_JaffaCakes118
-
Size
319KB
-
Sample
240421-qt7b5ace44
-
MD5
ff643925ab1766e8824df0ea24bd360d
-
SHA1
51d1d7776a51c091dbce0941d05bacf17558ed29
-
SHA256
3383331a239a845adc5491cae5c4c5f506d995512f39cf3274bd2c9a02ee7aef
-
SHA512
413ef73606c2d8ec0ccd4307da86e0ca2aa5825ee9f072b5376920cfd06d4a752af92c29e54d2b6568432a28c453c8442eab492659bb7562bcd401b5063c4b0d
-
SSDEEP
6144:IcZHcar1Y1F4kTtCE8y7gSCpgUXGqyzLlxE95/wWT2tHR+weaZ:fHNWw7dy7gS9UX2YPS2a
Behavioral task
behavioral1
Sample
ff643925ab1766e8824df0ea24bd360d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ff643925ab1766e8824df0ea24bd360d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
http://rerererererere.com/inst.php?id=forbidden
Targets
-
-
Target
ff643925ab1766e8824df0ea24bd360d_JaffaCakes118
-
Size
319KB
-
MD5
ff643925ab1766e8824df0ea24bd360d
-
SHA1
51d1d7776a51c091dbce0941d05bacf17558ed29
-
SHA256
3383331a239a845adc5491cae5c4c5f506d995512f39cf3274bd2c9a02ee7aef
-
SHA512
413ef73606c2d8ec0ccd4307da86e0ca2aa5825ee9f072b5376920cfd06d4a752af92c29e54d2b6568432a28c453c8442eab492659bb7562bcd401b5063c4b0d
-
SSDEEP
6144:IcZHcar1Y1F4kTtCE8y7gSCpgUXGqyzLlxE95/wWT2tHR+weaZ:fHNWw7dy7gS9UX2YPS2a
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-