General
-
Target
8a0c2d288de53b7d69078961cf14b730_JaffaCakes118
-
Size
4.0MB
-
Sample
240601-lg1xcshf47
-
MD5
8a0c2d288de53b7d69078961cf14b730
-
SHA1
83315153a6d0acee111683251d6465b68f30590e
-
SHA256
72b68249a4e34e5d396bdd07e3d0d71d73d11a967173d8ce344d2cabf22f8fa9
-
SHA512
e10f42e4e250a6e0bb1cd1ab8d095e0236eab75cacc9574367c47ccb20f5cc38857adbcac18b976976eb283a8f1dd7c69eab39cbd4c3a4dd0743949334faa54d
-
SSDEEP
6144:CId1grY0tn9cV1pZzcF0t+gydsdHWflS9klcRfw63wTc2gE:CId5N7zHV762RIr
Static task
static1
Behavioral task
behavioral1
Sample
8a0c2d288de53b7d69078961cf14b730_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
qakbot
325.43
abc012
1601625483
207.255.161.8:993
103.206.112.234:443
94.49.70.137:995
98.26.50.62:995
98.38.47.1:443
78.97.110.47:443
24.43.22.220:993
46.209.102.43:995
69.11.247.242:443
66.208.105.6:443
199.247.22.145:443
217.162.149.212:443
45.32.155.12:443
5.12.218.57:2222
190.85.91.154:443
103.76.160.110:443
77.27.174.49:995
172.78.30.215:443
71.187.170.235:443
89.42.142.35:443
185.19.190.81:443
184.97.132.62:443
95.77.223.148:443
86.98.74.44:995
2.7.65.32:2222
81.133.234.36:2222
84.117.176.32:443
71.12.214.209:2222
199.116.241.147:443
12.33.30.180:443
98.16.204.189:995
71.126.139.251:443
207.246.75.201:443
96.30.198.161:443
45.77.193.83:443
146.200.250.36:2222
72.204.242.138:443
108.5.34.248:443
72.204.242.138:990
2.90.26.187:443
103.238.231.40:443
24.122.0.90:443
207.255.161.8:995
207.237.1.152:443
184.180.157.203:2222
208.99.100.129:443
213.31.203.109:2222
45.32.154.10:443
94.52.68.72:443
173.245.152.231:443
78.96.199.79:443
77.46.172.129:995
190.220.8.10:443
175.142.189.201:443
72.204.242.138:50001
134.228.24.29:443
80.14.209.42:2222
68.190.152.98:443
72.190.101.70:443
185.246.9.69:995
199.247.16.80:443
45.46.53.140:2222
66.215.32.224:443
95.179.247.224:443
24.139.132.70:443
207.255.161.8:443
100.4.173.223:443
203.45.104.33:443
80.195.103.146:2222
36.77.151.211:443
24.104.222.81:443
93.149.253.201:2222
31.5.21.66:443
108.30.125.94:443
84.247.55.190:443
141.158.47.123:443
85.186.115.219:995
94.52.160.116:443
66.26.160.37:443
50.244.112.106:443
184.98.103.204:995
5.15.90.159:2222
41.228.227.172:443
75.136.40.155:443
39.36.218.78:995
67.60.113.253:2222
89.137.211.239:443
47.44.217.98:443
2.50.131.64:443
66.222.88.126:995
2.50.59.177:443
86.97.161.201:443
190.30.185.80:443
71.80.66.107:443
148.240.52.146:443
24.234.86.201:995
173.22.125.129:2222
203.198.96.200:443
117.218.208.239:443
188.247.252.243:443
144.139.47.206:443
90.175.88.99:2222
68.225.60.77:443
189.183.74.198:995
47.185.140.236:80
216.201.162.158:443
65.131.33.110:995
203.106.195.67:443
24.40.173.134:443
71.220.200.82:2222
65.102.149.94:995
69.123.116.167:2222
23.240.70.80:443
79.113.8.149:443
205.178.7.90:443
96.18.240.158:443
24.28.183.107:995
73.225.67.0:443
87.65.204.240:995
71.197.126.250:443
70.124.29.226:443
173.173.1.164:443
69.40.16.109:443
24.128.117.95:443
96.255.188.58:443
69.47.239.10:443
65.24.76.114:443
71.199.99.229:995
24.191.214.43:2083
174.101.142.231:443
173.21.10.71:2222
70.92.123.49:443
24.27.82.216:2222
64.201.125.138:443
75.182.220.196:2222
73.200.219.143:443
50.29.166.232:995
73.23.194.75:443
68.46.142.48:995
71.74.12.34:443
71.218.58.245:443
68.184.45.73:443
89.33.87.107:443
70.123.92.175:2222
2.51.221.138:995
74.68.144.202:443
75.82.182.228:2222
98.240.24.57:443
71.56.53.127:443
Targets
-
-
Target
8a0c2d288de53b7d69078961cf14b730_JaffaCakes118
-
Size
4.0MB
-
MD5
8a0c2d288de53b7d69078961cf14b730
-
SHA1
83315153a6d0acee111683251d6465b68f30590e
-
SHA256
72b68249a4e34e5d396bdd07e3d0d71d73d11a967173d8ce344d2cabf22f8fa9
-
SHA512
e10f42e4e250a6e0bb1cd1ab8d095e0236eab75cacc9574367c47ccb20f5cc38857adbcac18b976976eb283a8f1dd7c69eab39cbd4c3a4dd0743949334faa54d
-
SSDEEP
6144:CId1grY0tn9cV1pZzcF0t+gydsdHWflS9klcRfw63wTc2gE:CId5N7zHV762RIr
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-