General
-
Target
20bd0c1d59e03a4b38e7c549932d97ad_JaffaCakes118
-
Size
276KB
-
Sample
240703-cnywxascja
-
MD5
20bd0c1d59e03a4b38e7c549932d97ad
-
SHA1
4a830a5465eb605c66476d192eb29466c6d58488
-
SHA256
8fdb9468d057a7cfa157937afec46405474e32db8789ca864072afb379be66bd
-
SHA512
331ed54dcdfc3f79a69be786b297687b25e90125270d11fac6912e778ba0fdd16c3abc81a96793b27e7c8cc434199ec265cad943387a4d91d6fe904694e41fd4
-
SSDEEP
6144:Rk4qmOVhzixSoXeX0pY93Nbe/AWrwxhRd7kFT4vj9CG:G9bziYaSQ/AWa37kkjU
Behavioral task
behavioral1
Sample
20bd0c1d59e03a4b38e7c549932d97ad_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20bd0c1d59e03a4b38e7c549932d97ad_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
cybergate
2.6
lba-ksa
bso0ome.no-ip.info:288
***MUTEX***
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
texto da mensagem
-
message_box_title
tÃtulo da mensagem
-
password
abcd1234
-
regkey_hkcu
HKCU
-
regkey_hklm
HKLM
Targets
-
-
Target
20bd0c1d59e03a4b38e7c549932d97ad_JaffaCakes118
-
Size
276KB
-
MD5
20bd0c1d59e03a4b38e7c549932d97ad
-
SHA1
4a830a5465eb605c66476d192eb29466c6d58488
-
SHA256
8fdb9468d057a7cfa157937afec46405474e32db8789ca864072afb379be66bd
-
SHA512
331ed54dcdfc3f79a69be786b297687b25e90125270d11fac6912e778ba0fdd16c3abc81a96793b27e7c8cc434199ec265cad943387a4d91d6fe904694e41fd4
-
SSDEEP
6144:Rk4qmOVhzixSoXeX0pY93Nbe/AWrwxhRd7kFT4vj9CG:G9bziYaSQ/AWa37kkjU
Score7/10 -