General
-
Target
15939c4f39122c70c39167ef5ee2a8cd_JaffaCakes118
-
Size
2.5MB
-
Sample
240505-czk47afb97
-
MD5
15939c4f39122c70c39167ef5ee2a8cd
-
SHA1
496b926e3ee22bcf968d2391ae2a71c68e93bf87
-
SHA256
92e5feb755003804f26ad8739fb8b4b6be9a11647d4b31d629802faa0629c554
-
SHA512
a3077c8278c3dba48f354294bb3829371a6672a4522d4deb483bda11e0fb6374793a29ad6047b6d8b93c85650fadba18d01c6a17cb69ee19a5601dc475a6d22b
-
SSDEEP
49152:3WJ2VVpr2VVOJD1nwJRfpl0lW1FC0YU5x1Y2civsR+sdFXa5wj:G0VVpKVVOJDVunmW7C015x1Y2xTsdBay
Behavioral task
behavioral1
Sample
15939c4f39122c70c39167ef5ee2a8cd_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15939c4f39122c70c39167ef5ee2a8cd_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
lokibot
http://custom-packaging-products.com/gator/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
15939c4f39122c70c39167ef5ee2a8cd_JaffaCakes118
-
Size
2.5MB
-
MD5
15939c4f39122c70c39167ef5ee2a8cd
-
SHA1
496b926e3ee22bcf968d2391ae2a71c68e93bf87
-
SHA256
92e5feb755003804f26ad8739fb8b4b6be9a11647d4b31d629802faa0629c554
-
SHA512
a3077c8278c3dba48f354294bb3829371a6672a4522d4deb483bda11e0fb6374793a29ad6047b6d8b93c85650fadba18d01c6a17cb69ee19a5601dc475a6d22b
-
SSDEEP
49152:3WJ2VVpr2VVOJD1nwJRfpl0lW1FC0YU5x1Y2civsR+sdFXa5wj:G0VVpKVVOJDVunmW7C015x1Y2xTsdBay
Score10/10-
Accesses Microsoft Outlook profiles
-