General
-
Target
66130161c3e9dfb1cd6f5ce0065c4bc8_JaffaCakes118
-
Size
88KB
-
Sample
240729-22t8bavfjn
-
MD5
66130161c3e9dfb1cd6f5ce0065c4bc8
-
SHA1
18c4093b84c077f8930c6091237749e5c18dd0b1
-
SHA256
9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680
-
SHA512
4ba68b506e898df5fd91c6920323107d98472d8ce96cb6261cc4d97e99c62e3ab90843988af025bb1101f272c276a9dd6f7d99a7d2a87c35dcd47148b44e44e3
-
SSDEEP
1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIekzZ3:9dOy+ubiDBzv+1H4OgYEIR3
Behavioral task
behavioral1
Sample
66130161c3e9dfb1cd6f5ce0065c4bc8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
66130161c3e9dfb1cd6f5ce0065c4bc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
pony
http://shivamauxichem.com/default.php?yTfVhmjTXLm3HjnxhAfOkiU3Qp9SdC6JL
http://inglesamericano.edu.gt/default.php?x7z5cFlYMS5Jxxrijlf4OwAzAutD7
http://frederickscottarcher.com/default.php?kgKoqcurdpQWAfo5IqowU7y2tiB
http://artdeciel.com/default.php?uE2HN31OsigbCP7qD8uAqU8f4vXgCS8Cheh8LL
http://tastefulspace.com/default.php?XwE3Vu15haKu28EwKMaPqgtX6jJv2KVRdK
Targets
-
-
Target
66130161c3e9dfb1cd6f5ce0065c4bc8_JaffaCakes118
-
Size
88KB
-
MD5
66130161c3e9dfb1cd6f5ce0065c4bc8
-
SHA1
18c4093b84c077f8930c6091237749e5c18dd0b1
-
SHA256
9d25b0749d2105e5da7552c5bdc98664f69604e0e17eaf259673aded03d40680
-
SHA512
4ba68b506e898df5fd91c6920323107d98472d8ce96cb6261cc4d97e99c62e3ab90843988af025bb1101f272c276a9dd6f7d99a7d2a87c35dcd47148b44e44e3
-
SSDEEP
1536:x3V3e8KytqTZkYu5SCvaDBzgM+5zu9kS24zxAkOg8WTvMEIekzZ3:9dOy+ubiDBzv+1H4OgYEIR3
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-