General
- Target 0a8e67551962b74ff294c2b33524bd0b_JaffaCakes118
- Size 1024KB
- Sample240430-2ae93sba84
- SHA256 001e74b98d8f65bc9170ef6921743b7f269f26f837ac59d358a2d224b41782fb
- MD5 0a8e67551962b74ff294c2b33524bd0b
- SHA1 593502b394dce2fbbe88fb30559693cf207067c4
- SHA512 ba0e66fc25c926db5e722daf995f71a2019115de6709138e99c8ba9ec122bbeb9b87d873cfbd84ed948a5c9fd5baf642e94e6f4092e9d70a6499aeb455c828c3
- SSDEEP 12288:twPXKAzdH1nC/Mw8uKqjUmCj7q6fWmqXR90R1tXI4DKYSk:twXKAzdVnqbh5UmCjARy1t44uYt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
0a8e67551962b74ff294c2b33524bd0b_JaffaCakes118.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a8e67551962b74ff294c2b33524bd0b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
lokibot
C2
-
http://www.macniica.com/ifex/fre.php
-
http://kbfvzoboss.bid/alien/fre.php
-
http://alphastand.trade/alien/fre.php
-
http://alphastand.win/alien/fre.php
-
http://alphastand.top/alien/fre.php
Targets
-
- Target 0a8e67551962b74ff294c2b33524bd0b_JaffaCakes118
- Size 1024KB
- SHA256 001e74b98d8f65bc9170ef6921743b7f269f26f837ac59d358a2d224b41782fb
- MD5 0a8e67551962b74ff294c2b33524bd0b
- SHA1 593502b394dce2fbbe88fb30559693cf207067c4
- SHA512 ba0e66fc25c926db5e722daf995f71a2019115de6709138e99c8ba9ec122bbeb9b87d873cfbd84ed948a5c9fd5baf642e94e6f4092e9d70a6499aeb455c828c3
- SSDEEP 12288:twPXKAzdH1nC/Mw8uKqjUmCj7q6fWmqXR90R1tXI4DKYSk:twXKAzdVnqbh5UmCjARy1t44uYt
- MD5 SHA1 SHA512 SSDEEP
Score3/10