General
-
Target
01de1a2aa1d346a3c86e798476f88b1a_JaffaCakes118
-
Size
104KB
-
Sample
240426-221p4aeg8s
-
MD5
01de1a2aa1d346a3c86e798476f88b1a
-
SHA1
1e034e4562cf54525748c1046d1dee69208a57ce
-
SHA256
26a2f3a7a737a28a8ac1e8cc8a665832818dc40227a86f5e4f86916e2ef0b4e1
-
SHA512
d4b2a2f22f39e9fdc18d700204b1aa2bcee809f19baed6ffa41c10a6becfe2db5838a062e716944b11e7fecb87c713108d4d407924572d5c1e15bfd1698a322f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
01de1a2aa1d346a3c86e798476f88b1a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01de1a2aa1d346a3c86e798476f88b1a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
lokibot
http://thammyvienanthea.com/boss2/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
01de1a2aa1d346a3c86e798476f88b1a_JaffaCakes118
-
Size
104KB
-
MD5
01de1a2aa1d346a3c86e798476f88b1a
-
SHA1
1e034e4562cf54525748c1046d1dee69208a57ce
-
SHA256
26a2f3a7a737a28a8ac1e8cc8a665832818dc40227a86f5e4f86916e2ef0b4e1
-
SHA512
d4b2a2f22f39e9fdc18d700204b1aa2bcee809f19baed6ffa41c10a6becfe2db5838a062e716944b11e7fecb87c713108d4d407924572d5c1e15bfd1698a322f
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score10/10-
Accesses Microsoft Outlook profiles
-