General
-
Target
504ca643fdbd680c6f002bda31cbf324JaffaCakes118.bin
-
Size
104KB
-
Sample
240517-3bzksagd41
-
MD5
504ca643fdbd680c6f002bda31cbf324
-
SHA1
f768c99668165a6977eecf8766bb183102aa7847
-
SHA256
2944c58fc944d3c4170512800517f3bb8d63bac01ffa17dd61a45d6c946d6e65
-
SHA512
c14d3bb82304dfd6640d19ff9a70b0e3354efbd8e9f535eae860cd86d36cccb83a69b4155c957d83d62d92eb82989c119115cfad401992a11d80f28b0c8c5b32
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
504ca643fdbd680c6f002bda31cbf324JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
504ca643fdbd680c6f002bda31cbf324JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
lokibot
https://sdandsuns.com/ssg/slimebuka/lucky/loki/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
504ca643fdbd680c6f002bda31cbf324JaffaCakes118.bin
-
Size
104KB
-
MD5
504ca643fdbd680c6f002bda31cbf324
-
SHA1
f768c99668165a6977eecf8766bb183102aa7847
-
SHA256
2944c58fc944d3c4170512800517f3bb8d63bac01ffa17dd61a45d6c946d6e65
-
SHA512
c14d3bb82304dfd6640d19ff9a70b0e3354efbd8e9f535eae860cd86d36cccb83a69b4155c957d83d62d92eb82989c119115cfad401992a11d80f28b0c8c5b32
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score10/10-
Accesses Microsoft Outlook profiles
-