General
-
Target
40b14cd99109b91284625b00a4a8445e_JaffaCakes118
-
Size
703KB
-
Sample
240514-jddasaff58
-
MD5
40b14cd99109b91284625b00a4a8445e
-
SHA1
c5d15cbc8954e0d69f19aceb6b2a62231bb65636
-
SHA256
18dca52ce50cdf148ca233fb83cd2c3e3c7b39a9ac254c96ac374ae63eb8f44c
-
SHA512
6eafa9647c6fcfe9a28708b14f42f01f94e717fe656a46c924527363a6b5287d8876d8e393930557ec19d4b581df4dd38de5a056ec96f36bfb34512dbe327f69
-
SSDEEP
12288:0w4zjXcPq/JmHLgmG9qrqnABk3CUQPlOVwCGZbvRyaYe85QC0SbHYZjyHFOGExwN:Crzh2//rgrYo5Dlpnks3ExwN
Static task
static1
Behavioral task
behavioral1
Sample
40b14cd99109b91284625b00a4a8445e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40b14cd99109b91284625b00a4a8445e_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
matiex
Protocol: smtp- Host:
ebop.website - Port:
587 - Username:
[email protected] - Password:
P@ssw0rdP@ssw0rd
Targets
-
-
Target
40b14cd99109b91284625b00a4a8445e_JaffaCakes118
-
Size
703KB
-
MD5
40b14cd99109b91284625b00a4a8445e
-
SHA1
c5d15cbc8954e0d69f19aceb6b2a62231bb65636
-
SHA256
18dca52ce50cdf148ca233fb83cd2c3e3c7b39a9ac254c96ac374ae63eb8f44c
-
SHA512
6eafa9647c6fcfe9a28708b14f42f01f94e717fe656a46c924527363a6b5287d8876d8e393930557ec19d4b581df4dd38de5a056ec96f36bfb34512dbe327f69
-
SSDEEP
12288:0w4zjXcPq/JmHLgmG9qrqnABk3CUQPlOVwCGZbvRyaYe85QC0SbHYZjyHFOGExwN:Crzh2//rgrYo5Dlpnks3ExwN
Score10/10-
Matiex Main payload
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-