General
-
Target
6d8ab5af874bc3bcdf1df536430235fa_JaffaCakes118
-
Size
338KB
-
Sample
240524-gseq2sfh8x
-
MD5
6d8ab5af874bc3bcdf1df536430235fa
-
SHA1
068db39ea70430d8908edb0c3bb2105e3f06e52c
-
SHA256
b5869677c8c331b1e495f449801df3cf9aeb5d2969b86889ebda9ef8b42053c8
-
SHA512
22c61638d5c8490959741ece8b52deb974ce3a0bc432c3b95870ff339b239ff1cbbd7df5a5aa74eb151639b02c092d2e7400f6e8198b4ceae7256097e15e77b9
-
SSDEEP
6144:sOMtWveCEzlG2RE5ouBBmc/IUs+CE8ig7B1oS50bOWj13zDKJsRh:s3tWveVzlNRE5ouP/IX+2Dnqj13ze
Static task
static1
Behavioral task
behavioral1
Sample
6d8ab5af874bc3bcdf1df536430235fa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d8ab5af874bc3bcdf1df536430235fa_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
6d8ab5af874bc3bcdf1df536430235fa_JaffaCakes118
-
Size
338KB
-
MD5
6d8ab5af874bc3bcdf1df536430235fa
-
SHA1
068db39ea70430d8908edb0c3bb2105e3f06e52c
-
SHA256
b5869677c8c331b1e495f449801df3cf9aeb5d2969b86889ebda9ef8b42053c8
-
SHA512
22c61638d5c8490959741ece8b52deb974ce3a0bc432c3b95870ff339b239ff1cbbd7df5a5aa74eb151639b02c092d2e7400f6e8198b4ceae7256097e15e77b9
-
SSDEEP
6144:sOMtWveCEzlG2RE5ouBBmc/IUs+CE8ig7B1oS50bOWj13zDKJsRh:s3tWveVzlNRE5ouP/IX+2Dnqj13ze
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-