General
- Target 9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
- Size 1.2MB
- Sample240610-fsaawsdb78
- SHA256 f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
- MD5 9a654c7a4c2e9c89fe8b8cfd6675150c
- SHA1 6e96a75bfb0594863ae4e625dfdc1b9ba46a8b13
- SHA512 69a658162d81be77e200c4f03ae503aa6f5467e5cf7ff123bb98f9b6f677da0c7c4e2abc41a950ee29b86d14395d043112fe511ad9d4066b51d637b92f9c58bf
- SSDEEP 24576:7tb20pkaCqT5TBWgNQ7aYvjAFjcTsd06A:4Vg5tQ7aYvjAFjcTF5
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 9a654c7a4c2e9c89fe8b8cfd6675150c_JaffaCakes118
- Size 1.2MB
- SHA256 f66895b1e158392dd6bba2e705799955ba7aa21a03bad6d315863fbfac80d804
- MD5 9a654c7a4c2e9c89fe8b8cfd6675150c
- SHA1 6e96a75bfb0594863ae4e625dfdc1b9ba46a8b13
- SHA512 69a658162d81be77e200c4f03ae503aa6f5467e5cf7ff123bb98f9b6f677da0c7c4e2abc41a950ee29b86d14395d043112fe511ad9d4066b51d637b92f9c58bf
- SSDEEP 24576:7tb20pkaCqT5TBWgNQ7aYvjAFjcTsd06A:4Vg5tQ7aYvjAFjcTF5
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext