General

  • Target

    2727e2819fc55bda542edb3d43ef090b_JaffaCakes118

  • Size

    40KB

  • MD5

    2727e2819fc55bda542edb3d43ef090b

  • SHA1

    0f3e64f9fadea771be5a2e69129741b552df5227

  • SHA256

    7631e3bf1c6e7ca80d0b1c3cf69abe0e5873a05642ed19ba0396986c54eb3760

  • SHA512

    9519debd1f36d16de354d43d316a76f7e7a0a33cd3b15ba6c5072ea4b56898e280f951587d6091ba5027d481806d89c2b84f76d8f3c08b8f46c08b372f62d543

  • SSDEEP

    768:t23Dp1faJWMJNgAd7OyXIhqR7GBJ3+seFFEP0aD:O1CJzgM7Oy4YR7WeFHaD

Score
10/10

Malware Config

Extracted

Family

phorphiex

C2

http://185.215.113.93/

http://thaus.ws/

http://thaus.top/

http://gimmefile.top/

http://feedmefile.top/

http://gotsomefile.top/

Wallets

15DBeUGFSQLbpYvWLJwzHUXSRrHNU9uQuS8c2wvFLZ7Nxz3N

1E5ZxnNUbbGQarWjMA7tCwp3Btm38GvRkv

3AcMV5pSUcxMmmcMbfSkJXRKbCrF3ysUDJ

bitcoincash:qqucl3fev20z4upudppa8p5hd6j3zzgyfuwae00pfr

XkcKjKZqNUkChwJXMj5uDjDns6etXvakir

D7MYki8urW3xq8sZJ8Q2v2ZrHxjzp7ACvb

0x76e4CB2fcf7f931Fd750e93F443536Ee068d1cdE

LfYFvpk2hccXw12tN3BBMWh7EcUBMbKoTG

rUQFcff9R1eKAwTtR1wbuQxmcoB236mz44

TEUaG7jyXdyrDS3JeEg1w1hotmmEMjx4TB

t1gTRxsrEXwky32j22jgFRZAafBzmCV2M2V

AT5Vm3ZrUg98s9kBue2g9YjnwK4kFKhQw3

bitcoincash:qqucl3fev20z4upudppa8p5hd6j3zzgyfuwae00pfr

44L2q3sPJ3DMJZiuSpHvehHMLbMXx3SAoVbLm5DWDw1A7PhUvcCPAGg5qAN98DWAUG7CuD4WmydP4JkewTz2aeVd4qhS822

GBLUYL3QTKP3NXVWCYNZ7ZH4CWFT6PVCXEYCNUNSHM34WKG2UL5EDQMV

bnb154sx9pdh8er33ujxlpfk3zwvlfp9rd5rskvvgc

bc1qn4r93am7rxxr4a5dwydhwx0p2kd4xfd7mz42f3

Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0

Signatures

  • Phorphiex family
  • Phorphiex payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2727e2819fc55bda542edb3d43ef090b_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    fbe38eac33127c8216f939b478d0cb1c


    Headers

    Imports

    Sections