General
-
Target
00da227ab9ed05c46e38aa0ccbf52b4f_JaffaCakes118
-
Size
104KB
-
Sample
240426-qh8e2sdb21
-
MD5
00da227ab9ed05c46e38aa0ccbf52b4f
-
SHA1
c3e6a80fa7b96d2a5c836b3d96a186091ba2c550
-
SHA256
bb5d5f14655f12fe2c1d726c0c9199307a0ed03ca03381fe31023cc3747980bc
-
SHA512
87bd91f08c3a9ff75dd4180c6d37f3bd124849886262ff374d20c37f7a1981a2d8d305a48067dc8c90ce44c73fbe8ae1028b05a82f7e3f5331c406d622b04d05
-
SSDEEP
1536:VeORxEvCUqTdwhUZRDUOdpUPKaeGo5NSc0n9zqst0OIyzCTv2xkzkotiNV:EOq6TbAOdpUSaeG0IP0OZzxYif
Behavioral task
behavioral1
Sample
00da227ab9ed05c46e38aa0ccbf52b4f_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
pony
http://98.142.221.58/~comsgautopart/.regedit/mail/home/gate.php
Targets
-
-
Target
00da227ab9ed05c46e38aa0ccbf52b4f_JaffaCakes118
-
Size
104KB
-
MD5
00da227ab9ed05c46e38aa0ccbf52b4f
-
SHA1
c3e6a80fa7b96d2a5c836b3d96a186091ba2c550
-
SHA256
bb5d5f14655f12fe2c1d726c0c9199307a0ed03ca03381fe31023cc3747980bc
-
SHA512
87bd91f08c3a9ff75dd4180c6d37f3bd124849886262ff374d20c37f7a1981a2d8d305a48067dc8c90ce44c73fbe8ae1028b05a82f7e3f5331c406d622b04d05
-
SSDEEP
1536:VeORxEvCUqTdwhUZRDUOdpUPKaeGo5NSc0n9zqst0OIyzCTv2xkzkotiNV:EOq6TbAOdpUSaeG0IP0OZzxYif
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-