General
-
Target
ad1b5a7e20fe6f100d74ccfaf1201aa0_JaffaCakes118
-
Size
492KB
-
Sample
240615-gt1pxavank
-
MD5
ad1b5a7e20fe6f100d74ccfaf1201aa0
-
SHA1
9442a8c6f6692a2e08fb99072f13eeaa1ba85525
-
SHA256
87699d5e90addbea8c647b5b735499b289f6d0570aad9ef1f71804aeb7f9499f
-
SHA512
037e5be27090afbee4f8ed4185d0c0f56f78d0ca912d8fea3d98466575836e1e0d0aebe333a7a5f15390763542e0cf9177e11c75ad2c94c7969a344b5334bd37
-
SSDEEP
6144:29YLEZjB5DHX0hE96SKEDQBikAmNYQ8yfrnGsZtKMfp5Nm0G2bHRMvFEK2Xh3FjX:29YLDhmfQFNY9ipLzboG/r
Static task
static1
Behavioral task
behavioral1
Sample
ad1b5a7e20fe6f100d74ccfaf1201aa0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ad1b5a7e20fe6f100d74ccfaf1201aa0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
lokibot
http://kasongogold.com/sertyui890/kertyuiyt/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
ad1b5a7e20fe6f100d74ccfaf1201aa0_JaffaCakes118
-
Size
492KB
-
MD5
ad1b5a7e20fe6f100d74ccfaf1201aa0
-
SHA1
9442a8c6f6692a2e08fb99072f13eeaa1ba85525
-
SHA256
87699d5e90addbea8c647b5b735499b289f6d0570aad9ef1f71804aeb7f9499f
-
SHA512
037e5be27090afbee4f8ed4185d0c0f56f78d0ca912d8fea3d98466575836e1e0d0aebe333a7a5f15390763542e0cf9177e11c75ad2c94c7969a344b5334bd37
-
SSDEEP
6144:29YLEZjB5DHX0hE96SKEDQBikAmNYQ8yfrnGsZtKMfp5Nm0G2bHRMvFEK2Xh3FjX:29YLDhmfQFNY9ipLzboG/r
Score10/10-
Accesses Microsoft Outlook profiles
-