General
-
Target
7a55c8f9eee420566042a1875e7add8e_JaffaCakes118
-
Size
648KB
-
Sample
240527-ypjz2agb4y
-
MD5
7a55c8f9eee420566042a1875e7add8e
-
SHA1
786d0dfaaeb679a341ce44f5afa45ece6a725603
-
SHA256
7d58f3772df7e7ffa01068849ac73b09e3f788448a968a4b17f0f952e3e05de5
-
SHA512
7357826f537af6a3b4b69a4119be31c6c95e9d0b29bb291809e80da54c0e95084c2a5ec07643d01b18b215f38874f8dcf0eb1481b1dfd06a939610bb9a5610b1
-
SSDEEP
1536:vzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:USHIG6mQwGmfOQd8YhY0/EGUG
Behavioral task
behavioral1
Sample
7a55c8f9eee420566042a1875e7add8e_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7a55c8f9eee420566042a1875e7add8e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
lokibot
http://www.siraj-lightings.com/chaigolaiga/Panel/five/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
7a55c8f9eee420566042a1875e7add8e_JaffaCakes118
-
Size
648KB
-
MD5
7a55c8f9eee420566042a1875e7add8e
-
SHA1
786d0dfaaeb679a341ce44f5afa45ece6a725603
-
SHA256
7d58f3772df7e7ffa01068849ac73b09e3f788448a968a4b17f0f952e3e05de5
-
SHA512
7357826f537af6a3b4b69a4119be31c6c95e9d0b29bb291809e80da54c0e95084c2a5ec07643d01b18b215f38874f8dcf0eb1481b1dfd06a939610bb9a5610b1
-
SSDEEP
1536:vzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:USHIG6mQwGmfOQd8YhY0/EGUG
Score10/10-
Accesses Microsoft Outlook profiles
-