General
-
Target
4f313c8d6fd56baa9e5932809f161c87_JaffaCakes118
-
Size
124KB
-
Sample
240517-kkmngahg7t
-
MD5
4f313c8d6fd56baa9e5932809f161c87
-
SHA1
bd0afa2759f0fb2d7a64a8637e7fd2eb425fa789
-
SHA256
604baf6ea4f635d685d4a47ae7f9536cc0a22d9abe54f16366959ae20555c780
-
SHA512
b2f69877ecd2d44b410005cfa7d36f6637824dd072879ab94894760657a253fb6554496f70b56e94589dc62d62ba00eaa1f628bcfa78e54ca01df08c39c940fa
-
SSDEEP
1536:3SO5/UUVlyQ0tD5pkoCVOeV7Dbu8VdFZqMtRzMlyyLtAtuqBagS4iEAbe:iO5/z70lCVOeV7Dbu6dFEoGPtamne
Behavioral task
behavioral1
Sample
4f313c8d6fd56baa9e5932809f161c87_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
netwire
174.127.99.182:564
-
activex_autorun
false
-
copy_executable
false
-
delete_original
false
-
host_id
dv8exclusive
-
keylogger_dir
C:\Users\admin\AppData\Roaming\Logs\
-
lock_executable
false
-
offline_keylogger
true
-
password
Password
-
registry_autorun
false
-
use_mutex
false
Targets
-
-
Target
4f313c8d6fd56baa9e5932809f161c87_JaffaCakes118
-
Size
124KB
-
MD5
4f313c8d6fd56baa9e5932809f161c87
-
SHA1
bd0afa2759f0fb2d7a64a8637e7fd2eb425fa789
-
SHA256
604baf6ea4f635d685d4a47ae7f9536cc0a22d9abe54f16366959ae20555c780
-
SHA512
b2f69877ecd2d44b410005cfa7d36f6637824dd072879ab94894760657a253fb6554496f70b56e94589dc62d62ba00eaa1f628bcfa78e54ca01df08c39c940fa
-
SSDEEP
1536:3SO5/UUVlyQ0tD5pkoCVOeV7Dbu8VdFZqMtRzMlyyLtAtuqBagS4iEAbe:iO5/z70lCVOeV7Dbu6dFEoGPtamne
-
NetWire RAT payload
-