General
-
Target
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
-
Size
1.3MB
-
Sample
240616-cl6tqsygmq
-
MD5
b144119fa5c6d075f630cdf70cc9d58a
-
SHA1
ebe7de346ed3ba081bbb3c4c1c62cf2407f0575e
-
SHA256
3c7f26970b9267c1dcdd581f8883e8f3f0da8c554d740bac39f90334b6890916
-
SHA512
54960be5a7f72801928998d41dd5fe5be58d957669a0557e29a81f3b698df268bc9838c4a28af46e71e456a3f8d7899c1622a021b24c42c707f61890a65f37ec
-
SSDEEP
24576:Njz1ggks66ms2mjq1q2+QPBJssTwZ+W22y0yR7AM5Y9Qhh1fCt4P61w9FuPfgsMb:LvFOfr8NMCNHbx
Static task
static1
Behavioral task
behavioral1
Sample
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
lokibot
http://23.95.132.48/~main/.isuoxiso/w.php/JLlbjCEJ9CtbN
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
-
Size
1.3MB
-
MD5
b144119fa5c6d075f630cdf70cc9d58a
-
SHA1
ebe7de346ed3ba081bbb3c4c1c62cf2407f0575e
-
SHA256
3c7f26970b9267c1dcdd581f8883e8f3f0da8c554d740bac39f90334b6890916
-
SHA512
54960be5a7f72801928998d41dd5fe5be58d957669a0557e29a81f3b698df268bc9838c4a28af46e71e456a3f8d7899c1622a021b24c42c707f61890a65f37ec
-
SSDEEP
24576:Njz1ggks66ms2mjq1q2+QPBJssTwZ+W22y0yR7AM5Y9Qhh1fCt4P61w9FuPfgsMb:LvFOfr8NMCNHbx
Score10/10-
Accesses Microsoft Outlook profiles
-