General
-
Target
1b70124415d1c3b32bbc9fa082c6943c_JaffaCakes118
-
Size
1000KB
-
Sample
240701-qg7r5atcrc
-
MD5
1b70124415d1c3b32bbc9fa082c6943c
-
SHA1
46d20d3184f7140fb80a78fc0368d7c1d2b1e78a
-
SHA256
74b5caa560f8857431df58a21b85880e07c2e06d84fbb3a327c1add7e6b21495
-
SHA512
73ac06f95e36200b1b0153b278afe0cdb9b12497e57f166a9277187ab1542cf0d88d93c479862857fe0bf7504dbebb1067c947e806749d1b641559111e5978c7
-
SSDEEP
12288:UIu9pb7QlUDrNMc3a46A9jmP/uhu/yMS08CkntxYRv:HuDbaurNtFfmP/UDMS08Ckn3q
Behavioral task
behavioral1
Sample
1b70124415d1c3b32bbc9fa082c6943c_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b70124415d1c3b32bbc9fa082c6943c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
kutaki
http://sdaskmda.club/papa/love.php
http://terebinnahi.club/sec/kool.txt
Targets
-
-
Target
1b70124415d1c3b32bbc9fa082c6943c_JaffaCakes118
-
Size
1000KB
-
MD5
1b70124415d1c3b32bbc9fa082c6943c
-
SHA1
46d20d3184f7140fb80a78fc0368d7c1d2b1e78a
-
SHA256
74b5caa560f8857431df58a21b85880e07c2e06d84fbb3a327c1add7e6b21495
-
SHA512
73ac06f95e36200b1b0153b278afe0cdb9b12497e57f166a9277187ab1542cf0d88d93c479862857fe0bf7504dbebb1067c947e806749d1b641559111e5978c7
-
SSDEEP
12288:UIu9pb7QlUDrNMc3a46A9jmP/uhu/yMS08CkntxYRv:HuDbaurNtFfmP/UDMS08Ckn3q
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-