General
-
Target
470711a8c1e49ad4e6202e21ebce34a7_JaffaCakes118
-
Size
472KB
-
Sample
240515-tzhgqshg68
-
MD5
470711a8c1e49ad4e6202e21ebce34a7
-
SHA1
f74ffca223feb25c1bda6229c245d7aa31234cfe
-
SHA256
38566f9a331bb8503835d7abfdc027d9d3fa45c65f388d7fd84b2c97f297ba85
-
SHA512
0a6d973ac9bf6ab2224c59969595603f4fa41c0d4c92b92a30a76872e08033c48ec82ec926efe1aa24d1863181d08dd9ef67d65466291866173a074c7e5304b0
-
SSDEEP
6144:5YFmEvMGFpB5fzKL87p7yC5KCpQSZc/t6KiuOVRDyXteftTOj:5YQyFpB5fzKL8dL5G+J0XYTO
Static task
static1
Behavioral task
behavioral1
Sample
470711a8c1e49ad4e6202e21ebce34a7_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
470711a8c1e49ad4e6202e21ebce34a7_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
lokibot
http://jayp.eu/loki/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
470711a8c1e49ad4e6202e21ebce34a7_JaffaCakes118
-
Size
472KB
-
MD5
470711a8c1e49ad4e6202e21ebce34a7
-
SHA1
f74ffca223feb25c1bda6229c245d7aa31234cfe
-
SHA256
38566f9a331bb8503835d7abfdc027d9d3fa45c65f388d7fd84b2c97f297ba85
-
SHA512
0a6d973ac9bf6ab2224c59969595603f4fa41c0d4c92b92a30a76872e08033c48ec82ec926efe1aa24d1863181d08dd9ef67d65466291866173a074c7e5304b0
-
SSDEEP
6144:5YFmEvMGFpB5fzKL87p7yC5KCpQSZc/t6KiuOVRDyXteftTOj:5YQyFpB5fzKL8dL5G+J0XYTO
Score10/10-
Accesses Microsoft Outlook profiles
-