General
-
Target
34862c07cd78d7a666d050b47dd2947e_JaffaCakes118
-
Size
366KB
-
Sample
240710-nj4gdaxbqb
-
MD5
34862c07cd78d7a666d050b47dd2947e
-
SHA1
7cdbf29b0f30c5027a0a9a36d31dbaf59ff87a35
-
SHA256
6b86f83e3771fc5980e3a3ded1e1ecd25baff9f8cbd4f413300210790f99c42c
-
SHA512
baccd1c82c046a5c5449be13b965e22922705edfe14355868fa4436ccf5b8d9e20a015cefb59d412c48ec9b9dcf4fc11c327ad1fa2a73beb210a4bfcc8bece3b
-
SSDEEP
6144:CIpMzUW/BsYB1Z7ophFTFYh4mYvshWh1OpZbjukXjG9T2KrjPRZfKNyhTO4sbwfv:CfgWJtj9ophrM49O44pZbju0jGFzjPRf
Static task
static1
Behavioral task
behavioral1
Sample
34862c07cd78d7a666d050b47dd2947e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34862c07cd78d7a666d050b47dd2947e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
fickerstealer
deniedfight.com:80
Targets
-
-
Target
34862c07cd78d7a666d050b47dd2947e_JaffaCakes118
-
Size
366KB
-
MD5
34862c07cd78d7a666d050b47dd2947e
-
SHA1
7cdbf29b0f30c5027a0a9a36d31dbaf59ff87a35
-
SHA256
6b86f83e3771fc5980e3a3ded1e1ecd25baff9f8cbd4f413300210790f99c42c
-
SHA512
baccd1c82c046a5c5449be13b965e22922705edfe14355868fa4436ccf5b8d9e20a015cefb59d412c48ec9b9dcf4fc11c327ad1fa2a73beb210a4bfcc8bece3b
-
SSDEEP
6144:CIpMzUW/BsYB1Z7ophFTFYh4mYvshWh1OpZbjukXjG9T2KrjPRZfKNyhTO4sbwfv:CfgWJtj9ophrM49O44pZbju0jGFzjPRf
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-