General
-
Target
2ff64dfa12a3a3d9acf784b1bfaedefd_JaffaCakes118
-
Size
104KB
-
Sample
240510-tnzlwahd74
-
MD5
2ff64dfa12a3a3d9acf784b1bfaedefd
-
SHA1
b7e42fb85fdcb546f546f93fcb3cc0ff2dc8bfd2
-
SHA256
319084e72bd858187baaa0c7345f6bb0e89aa9febacac1cd2d1052954880a9e8
-
SHA512
87d602dd99177b778897e53b77588d7858febe6869c5dd93bd1d189eba713933482a7b3e7b3c73c5991c1710d172650c0a0987ca34a730413e84c7e292f5a5d1
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
2ff64dfa12a3a3d9acf784b1bfaedefd_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ff64dfa12a3a3d9acf784b1bfaedefd_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
lokibot
http://worldatdoor.in/sunny/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
2ff64dfa12a3a3d9acf784b1bfaedefd_JaffaCakes118
-
Size
104KB
-
MD5
2ff64dfa12a3a3d9acf784b1bfaedefd
-
SHA1
b7e42fb85fdcb546f546f93fcb3cc0ff2dc8bfd2
-
SHA256
319084e72bd858187baaa0c7345f6bb0e89aa9febacac1cd2d1052954880a9e8
-
SHA512
87d602dd99177b778897e53b77588d7858febe6869c5dd93bd1d189eba713933482a7b3e7b3c73c5991c1710d172650c0a0987ca34a730413e84c7e292f5a5d1
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score10/10-
Accesses Microsoft Outlook profiles
-