General
- Target 8f5304055ea27be5f8bf142540ed4834_JaffaCakes118
- Size 117KB
- Sample240602-y978csfa86
- SHA256 c6af8842df21b024c9123bef3ed114bacb82858dc3824b20ed55f07115e40e36
- MD5 8f5304055ea27be5f8bf142540ed4834
- SHA1 60db6691259f80336184c728f5fbb3fbee9f7788
- SHA512 8fca54a3ac0758af1745589882ee52411a465c6799616644cab142e7df4d99da88a874720772f6956e0a93526370fe21680cbd436b14c40c7571132559e3bbd4
- SSDEEP 1536:cust9m5htziX6ca3PGAPz1Um4xkdPjlNRDiBqawE4RP1aOh5/bzXxmS:cusD4ziKcep4OhHRWF4RP1aOh5v
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8f5304055ea27be5f8bf142540ed4834_JaffaCakes118.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f5304055ea27be5f8bf142540ed4834_JaffaCakes118.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
smokeloader
Version
-
2020
C2
-
http://naritouzina.net/
-
http://nukaraguasleep.net/
-
http://notfortuaj.net/
-
http://natuturalistic.net/
-
http://zaniolofusa.net/
rc4.i32
rc4.i32
Targets
-
- Target 8f5304055ea27be5f8bf142540ed4834_JaffaCakes118
- Size 117KB
- SHA256 c6af8842df21b024c9123bef3ed114bacb82858dc3824b20ed55f07115e40e36
- MD5 8f5304055ea27be5f8bf142540ed4834
- SHA1 60db6691259f80336184c728f5fbb3fbee9f7788
- SHA512 8fca54a3ac0758af1745589882ee52411a465c6799616644cab142e7df4d99da88a874720772f6956e0a93526370fe21680cbd436b14c40c7571132559e3bbd4
- SSDEEP 1536:cust9m5htziX6ca3PGAPz1Um4xkdPjlNRDiBqawE4RP1aOh5/bzXxmS:cusD4ziKcep4OhHRWF4RP1aOh5v
- MD5 SHA1 SHA512 SSDEEP
Score10/10Deletes itself
Loads dropped DLL