General
-
Target
2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118
-
Size
714KB
-
Sample
240510-l742psca26
-
MD5
2e9d78ab9a2e662a20e41e567fcbc5f3
-
SHA1
fc5625ef7684019270ea0417ecd8faea1222c0f3
-
SHA256
5e6ef055d7f7c00ec94075b5d0afd67eeb9075275d5cb868bb1a042fe876db24
-
SHA512
d231448c721fd7e29e7cbce36f4dbaa4eb94685546ffe0db829241f06f3c399ba8a1bf09751576412470a76fbecb3bd0ea8bf5fab9c34f6c7237fa680434af54
-
SSDEEP
12288:ThE0Jxp+oc2RxtsjoaMrUsRre0/cDVLq3mHk249x/IrF3j9n:Thj1cjoFwJ0JmHkDRSz9n
Static task
static1
Behavioral task
behavioral1
Sample
2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
lokibot
http://karenandkarren.com/multi980/mertyui989/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2e9d78ab9a2e662a20e41e567fcbc5f3_JaffaCakes118
-
Size
714KB
-
MD5
2e9d78ab9a2e662a20e41e567fcbc5f3
-
SHA1
fc5625ef7684019270ea0417ecd8faea1222c0f3
-
SHA256
5e6ef055d7f7c00ec94075b5d0afd67eeb9075275d5cb868bb1a042fe876db24
-
SHA512
d231448c721fd7e29e7cbce36f4dbaa4eb94685546ffe0db829241f06f3c399ba8a1bf09751576412470a76fbecb3bd0ea8bf5fab9c34f6c7237fa680434af54
-
SSDEEP
12288:ThE0Jxp+oc2RxtsjoaMrUsRre0/cDVLq3mHk249x/IrF3j9n:Thj1cjoFwJ0JmHkDRSz9n
Score10/10-
Accesses Microsoft Outlook profiles
-