General
-
Target
a0a74b0151fe253f32af6271c82358f7_JaffaCakes118
-
Size
556KB
-
Sample
240612-pjx52aybpl
-
MD5
a0a74b0151fe253f32af6271c82358f7
-
SHA1
4a2f16d6d0e8b4ebdd5049d828f5b65081e714ff
-
SHA256
8d9b282bd48f1e3677abcdb3edaa9cf561a79ab608acfc62875b039bd83a8e5e
-
SHA512
e614348277ec3932f81a2c8ef1c0f909687ff8333c664fe7a03472b9ab516016d9e6b73ecb392e99037e0112a09d50c9a1e92d6b80459ce5518da02f2d731144
-
SSDEEP
12288:NRvo0ORzaDSssIiAmIMMfeu9Qu9fxl3uyTSr/WKX3/z:TvfOdyxliQGu9Rdx8yTSr/WK7
Behavioral task
behavioral1
Sample
a0a74b0151fe253f32af6271c82358f7_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
vidar
7.7
237
http://search.ac.ug/
-
profile_id
237
Targets
-
-
Target
a0a74b0151fe253f32af6271c82358f7_JaffaCakes118
-
Size
556KB
-
MD5
a0a74b0151fe253f32af6271c82358f7
-
SHA1
4a2f16d6d0e8b4ebdd5049d828f5b65081e714ff
-
SHA256
8d9b282bd48f1e3677abcdb3edaa9cf561a79ab608acfc62875b039bd83a8e5e
-
SHA512
e614348277ec3932f81a2c8ef1c0f909687ff8333c664fe7a03472b9ab516016d9e6b73ecb392e99037e0112a09d50c9a1e92d6b80459ce5518da02f2d731144
-
SSDEEP
12288:NRvo0ORzaDSssIiAmIMMfeu9Qu9fxl3uyTSr/WKX3/z:TvfOdyxliQGu9Rdx8yTSr/WK7
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-