General
-
Target
8765c780998d681e03428b7500c4db28_JaffaCakes118
-
Size
231KB
-
Sample
240531-sa7vnabh8v
-
MD5
8765c780998d681e03428b7500c4db28
-
SHA1
d47ccebb925af5b00fa55045d612b1e9ad6bd4ec
-
SHA256
38a1e40c1a64f30c4ba00056b1f14f3321fa7348f7302ed586d67fcbb191104e
-
SHA512
c03d20b86997d5a6688d0be950cf65b6c6c6110bd078bf2603aef96bedc7b32082068266f025e8efcbbb847b386c0dde73a2ffc537faf754d3a033079ca9e14b
-
SSDEEP
6144:RwVmuSoq2Z1Y/VU/Zuy1Ryt8MbzqSsTIPrOx5:Gn5qzU/Zu4ylzPieO7
Static task
static1
Behavioral task
behavioral1
Sample
FiveM Bypass.exe
Resource
win7-20240215-en
Malware Config
Extracted
nanocore
1.2.2.0
crsiedem7.ddns.net:3344
41708a94-2adc-42c6-924a-7a0c689adc8e
-
activate_away_mode
true
-
backup_connection_host
crsiedem7.ddns.net
-
backup_dns_server
8.8.4.4
-
buffer_size
65535
-
build_time
2019-02-12T22:12:55.821021136Z
-
bypass_user_account_control
true
- bypass_user_account_control_data
-
clear_access_control
true
-
clear_zone_identifier
false
-
connect_delay
4000
-
connection_port
3344
-
default_group
Rated
-
enable_debug_mode
true
-
gc_threshold
1.048576e+07
-
keep_alive_timeout
30000
-
keyboard_logging
false
-
lan_timeout
2500
-
max_packet_size
1.048576e+07
-
mutex
41708a94-2adc-42c6-924a-7a0c689adc8e
-
mutex_timeout
5000
-
prevent_system_sleep
false
-
primary_connection_host
crsiedem7.ddns.net
-
primary_dns_server
8.8.8.8
-
request_elevation
true
-
restart_delay
5000
-
run_delay
0
-
run_on_startup
false
-
set_critical_process
true
-
timeout_interval
5000
-
use_custom_dns_server
false
-
version
1.2.2.0
-
wan_timeout
8000
Targets
-
-
Target
FiveM Bypass.exe
-
Size
241KB
-
MD5
a0d36bbd0bdab7b2ea4521203aed3c33
-
SHA1
5d04bc0d4ba783fa29a382fd243435dff8f0a260
-
SHA256
f88a226250d6a6179189d9639a45af0ef770ad895e1f6587ce92306b4b3bacbd
-
SHA512
5d105ab0e61b1d2ed2a3891fd5303e3d50ccb7e0915f2d22d67ef12558833a780871865ddfcf7c57a084b7b29a7ddc1264ca5a362bda70b409ff9add7dbb3a09
-
SSDEEP
6144:jc+hPtX8JNetxjNgE59powhV4V4+AykkkQQT3+F:Xhu4tME592whV4V4+zxBF
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-