Static task
static1
Behavioral task
behavioral1
Sample
7294a0574eb5289da99e15d2ce8c9234_JaffaCakes118.ps1
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7294a0574eb5289da99e15d2ce8c9234_JaffaCakes118.ps1
Resource
win10v2004-20240709-en
General
-
Target
7294a0574eb5289da99e15d2ce8c9234_JaffaCakes118
-
Size
120KB
-
MD5
7294a0574eb5289da99e15d2ce8c9234
-
SHA1
3fc5060b8355577ca2c81e9b0b42c6606fd290c7
-
SHA256
fd823b75cab1d25eb58873dc183b75c815d36551159602f7ed7b81bacc9df008
-
SHA512
a58f21aec4d512619bbdcfac1bb9c42d8dba7d612a4054417510c4d7ee14727674541bc4b9f9ce185990daea98a398ad5f1dd0a22768964553ef2cb6c3fa5a40
-
SSDEEP
1536:n55DM5hKn9N0plHalLf56fAG9DGCN+GEKXWKYJ0y9X+w:nmNnCb
Malware Config
Extracted
http://64464.cn/gamejump.htm
http://www.3110.cn/?G
http://64464.cn/%E5%8F%AF%E5%90%AF%E5%8A%A8%E7%BD%91%E5%9D%80A.html
http://www.3110.cn/?QG
http://www.3110.cn/?Gi
http://www.4688.com/?Gi
http://www.4688.com/?QG
http://www.4688.com/?AF
http://www.haoshuduo.com/?AF
http://www.7710.cn/?AF
http://www.3110.cn/
http://www.Youxidanji.com/
http://www.3110.cn/taobao.htm
Signatures
Files
-
7294a0574eb5289da99e15d2ce8c9234_JaffaCakes118.ps1