General
-
Target
aa5b0f840e24aa2d35e07d56123df729_JaffaCakes118
-
Size
104KB
-
Sample
240614-sk5s2szcmj
-
MD5
aa5b0f840e24aa2d35e07d56123df729
-
SHA1
7d8f40b34372aa4c6f4cbabaa11fb7bb23d8e5a3
-
SHA256
e05fc488f21b56a842561cb0b35ce47b39cd63352d1e633fdeb6a645903f62dd
-
SHA512
e4ab93bea30b4a357ad3053096b0d40cb599564e962c658573f8201c27424d0fca3f11d6d352de151c27ab1c25ee44c6c99eaee23ae26c4f98dfb0355219c988
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqoIzmd:nSHIG6mQwGmfOQd8YhY0/EpUG
Behavioral task
behavioral1
Sample
aa5b0f840e24aa2d35e07d56123df729_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aa5b0f840e24aa2d35e07d56123df729_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
lokibot
http://80.209.225.170/armani/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
aa5b0f840e24aa2d35e07d56123df729_JaffaCakes118
-
Size
104KB
-
MD5
aa5b0f840e24aa2d35e07d56123df729
-
SHA1
7d8f40b34372aa4c6f4cbabaa11fb7bb23d8e5a3
-
SHA256
e05fc488f21b56a842561cb0b35ce47b39cd63352d1e633fdeb6a645903f62dd
-
SHA512
e4ab93bea30b4a357ad3053096b0d40cb599564e962c658573f8201c27424d0fca3f11d6d352de151c27ab1c25ee44c6c99eaee23ae26c4f98dfb0355219c988
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqoIzmd:nSHIG6mQwGmfOQd8YhY0/EpUG
Score10/10-
Accesses Microsoft Outlook profiles
-