General
-
Target
702c5bd4b197e6c390338b9f3a8f4dcb_JaffaCakes118
-
Size
224KB
-
Sample
240524-3nxlysfd95
-
MD5
702c5bd4b197e6c390338b9f3a8f4dcb
-
SHA1
3b1dee0acb1daa0d93cf4a7476ff86778cbdd168
-
SHA256
d2d9b1b68cad29f7f83ed2ade47cdd013437745f602911a2dce7c11dbfd24ddc
-
SHA512
8c05912efff87267688634439b17244af96e1c02eb53b3ea542135f50a3494998c33ed26981291d27dde96056f330aa699382d1310a6b504e396ccf9c6ea0e6f
-
SSDEEP
3072:EJrU1m8zbfznOb3Fq833qhPJrU1m8zbfznOb3Fq833qh:EJrkbTObQY3CJrkbTObQY3
Behavioral task
behavioral1
Sample
702c5bd4b197e6c390338b9f3a8f4dcb_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
pony
http://detailingpro.co.in/wp-admin/network/anyipanelnew/gate.php
Targets
-
-
Target
702c5bd4b197e6c390338b9f3a8f4dcb_JaffaCakes118
-
Size
224KB
-
MD5
702c5bd4b197e6c390338b9f3a8f4dcb
-
SHA1
3b1dee0acb1daa0d93cf4a7476ff86778cbdd168
-
SHA256
d2d9b1b68cad29f7f83ed2ade47cdd013437745f602911a2dce7c11dbfd24ddc
-
SHA512
8c05912efff87267688634439b17244af96e1c02eb53b3ea542135f50a3494998c33ed26981291d27dde96056f330aa699382d1310a6b504e396ccf9c6ea0e6f
-
SSDEEP
3072:EJrU1m8zbfznOb3Fq833qhPJrU1m8zbfznOb3Fq833qh:EJrkbTObQY3CJrkbTObQY3
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-