General
-
Target
6ce98ae4edde1399d807306c1e46c016_JaffaCakes118
-
Size
104KB
-
Sample
240524-bthansgd72
-
MD5
6ce98ae4edde1399d807306c1e46c016
-
SHA1
7f70fafd5b5756289c926e55f337cd14feb2c034
-
SHA256
fe632ffdee3b42722079e3b1c7008e1313ee713d3a5e3e1dcbb39c341752df3f
-
SHA512
6168560494ca898381e95544c7458f42e4da0a4db982ce8439eac5efe9d6c7beb4205f439e2c01da62fa70ab4fcb50d5f45c87350d1df3d979e00438dc223442
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
6ce98ae4edde1399d807306c1e46c016_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6ce98ae4edde1399d807306c1e46c016_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
lokibot
http://23.95.132.48/~main/.isuoxiso/w.php/XnVMWEMw2Q9Yk
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
6ce98ae4edde1399d807306c1e46c016_JaffaCakes118
-
Size
104KB
-
MD5
6ce98ae4edde1399d807306c1e46c016
-
SHA1
7f70fafd5b5756289c926e55f337cd14feb2c034
-
SHA256
fe632ffdee3b42722079e3b1c7008e1313ee713d3a5e3e1dcbb39c341752df3f
-
SHA512
6168560494ca898381e95544c7458f42e4da0a4db982ce8439eac5efe9d6c7beb4205f439e2c01da62fa70ab4fcb50d5f45c87350d1df3d979e00438dc223442
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Score10/10-
Accesses Microsoft Outlook profiles
-