General
-
Target
7558a4fd6d02088af0dfe037d65b3ba8_JaffaCakes118
-
Size
128KB
-
Sample
240726-xwajhayfkl
-
MD5
7558a4fd6d02088af0dfe037d65b3ba8
-
SHA1
a629d3b3a2be9dff9148dfe3f196ca009450d213
-
SHA256
787eb4ea6564216ff0c1ebca1525a5da3583a1ac0132d594410a731ec75e03f5
-
SHA512
8ee56a2b75fc47e5cb4a2e8bb26071caa59473ab51147aea7cc2a0ff1a6a4db31065387b0d077d66835edd9bb1b536c52232e3b6ce43b22243805efd2fe2bf40
-
SSDEEP
3072:BcF9U7fedv/5t0sLtPEFNwFL2+n3uhlMw6W6psV:Bc7Se9RtZdsGnwMwlV
Static task
static1
Behavioral task
behavioral1
Sample
7558a4fd6d02088af0dfe037d65b3ba8_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
pony
http://200.72.183.54:81/pony/gate.php
http://91.121.84.204:8080/pony/gate.php
-
payload_url
http://power-tec.sk/D8aoPu86/XPVqAGE.exe
http://synergieassurance.com/AnJVfWxx/aFa.exe
http://mdesignsc.com/ZkUXt0nM/wgZ6S.exe
Targets
-
-
Target
7558a4fd6d02088af0dfe037d65b3ba8_JaffaCakes118
-
Size
128KB
-
MD5
7558a4fd6d02088af0dfe037d65b3ba8
-
SHA1
a629d3b3a2be9dff9148dfe3f196ca009450d213
-
SHA256
787eb4ea6564216ff0c1ebca1525a5da3583a1ac0132d594410a731ec75e03f5
-
SHA512
8ee56a2b75fc47e5cb4a2e8bb26071caa59473ab51147aea7cc2a0ff1a6a4db31065387b0d077d66835edd9bb1b536c52232e3b6ce43b22243805efd2fe2bf40
-
SSDEEP
3072:BcF9U7fedv/5t0sLtPEFNwFL2+n3uhlMw6W6psV:Bc7Se9RtZdsGnwMwlV
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-