General
-
Target
773d40144f60cd3133d59defbba2007d_JaffaCakes118
-
Size
4.2MB
-
Sample
240730-staz2a1alh
-
MD5
773d40144f60cd3133d59defbba2007d
-
SHA1
99b90db69a50bbc69085bb3a6b5f2cec87695082
-
SHA256
9668bf80c1521a42cebce4a8c81da28fd5b10d846af370b2ad7c0ccda415c258
-
SHA512
ce3df2ef537fda66e7210fa10a2f767dde81cd69501c1c7cc5bf1e3f368569e2bccb91132026a2a34a71b5c04aa1c56730a29e997b25ceee1b79438e6ad244e5
-
SSDEEP
12288:FX2NIwHFTQLKZapgbC0tIIl/QTACm/Uby:uIyFTQLK8pgbCiLl/h8by
Static task
static1
Behavioral task
behavioral1
Sample
773d40144f60cd3133d59defbba2007d_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
qakbot
325.43
abc007
1600765035
103.76.160.110:443
24.218.181.15:443
188.26.11.29:2222
217.162.149.212:443
96.236.225.10:443
85.185.202.53:995
95.179.247.224:443
96.30.198.161:443
45.32.154.10:443
199.247.16.80:443
189.150.106.230:22
71.221.92.98:443
24.234.86.201:995
176.223.82.244:995
24.27.82.216:2222
117.218.208.239:443
72.204.242.138:20
207.255.161.8:443
5.12.0.239:443
207.255.161.8:2087
207.255.161.8:32103
72.204.242.138:53
209.182.122.217:443
47.146.169.85:443
74.75.216.202:443
173.22.125.129:2222
72.190.101.70:443
80.195.103.146:2222
64.121.114.87:443
72.66.47.70:443
84.78.128.76:2222
84.247.55.190:443
86.122.241.39:2222
72.209.191.27:443
80.240.26.178:443
134.0.196.46:995
75.87.161.32:995
190.85.91.154:443
83.110.6.64:2222
68.14.210.246:22
103.206.112.234:443
47.146.32.175:443
24.53.49.240:2222
216.201.162.158:443
24.201.79.208:2078
96.41.93.96:443
66.222.88.126:995
99.195.113.20:443
175.211.225.118:443
172.78.30.215:443
2.88.23.102:995
2.50.112.11:443
67.60.113.253:2222
86.98.89.73:2222
77.159.149.74:443
203.106.195.67:443
75.165.38.209:50002
71.217.125.53:2222
117.215.198.240:443
103.238.231.40:443
41.228.222.129:443
67.165.206.193:993
185.19.190.81:443
46.53.66.162:443
24.210.45.215:443
78.96.199.79:443
81.133.234.36:2222
173.245.152.231:443
75.136.26.147:443
41.98.114.129:443
188.52.107.171:995
41.34.81.99:995
72.82.15.220:443
24.213.191.38:0
151.73.116.80:443
59.26.204.144:443
108.178.66.82:995
71.84.5.114:995
134.228.24.29:443
76.170.77.99:995
184.98.103.204:995
98.121.187.78:443
68.190.152.98:443
108.185.113.12:443
216.163.4.136:443
96.18.240.158:443
84.117.176.32:443
36.77.151.211:443
66.215.32.224:443
35.134.202.234:443
71.126.139.251:443
72.204.242.138:32102
45.32.155.12:443
207.255.161.8:465
184.180.157.203:2222
47.44.217.98:443
50.244.112.10:995
70.164.37.205:995
50.29.166.232:995
207.255.161.8:993
72.36.59.46:2222
2.50.59.177:443
65.30.213.13:6882
69.167.206.238:50001
73.32.115.251:443
71.187.170.235:443
207.255.161.8:2078
207.255.161.8:32100
68.174.15.223:443
93.86.219.77:995
213.31.203.48:2222
98.22.65.76:443
68.174.9.179:443
80.14.209.42:2222
65.131.33.110:995
67.209.195.198:443
202.141.244.118:995
84.232.238.30:443
72.204.242.138:465
89.42.142.35:443
185.246.9.69:995
69.11.247.242:443
75.81.25.223:443
86.97.11.96:443
50.232.172.114:443
199.247.22.145:443
207.255.161.8:995
72.204.242.138:990
77.27.174.49:995
144.139.47.206:443
203.198.96.200:443
50.244.112.106:443
189.231.196.236:443
50.104.68.223:443
5.12.217.37:2222
95.77.223.148:443
209.137.209.163:995
2.89.114.174:995
109.154.214.224:2222
37.210.186.213:61201
93.113.177.152:443
173.90.33.182:2222
24.37.178.158:443
39.37.244.25:995
2.7.65.32:2222
94.52.160.116:443
86.97.184.46:2222
77.30.99.99:995
141.158.47.123:443
47.28.131.209:443
Targets
-
-
Target
773d40144f60cd3133d59defbba2007d_JaffaCakes118
-
Size
4.2MB
-
MD5
773d40144f60cd3133d59defbba2007d
-
SHA1
99b90db69a50bbc69085bb3a6b5f2cec87695082
-
SHA256
9668bf80c1521a42cebce4a8c81da28fd5b10d846af370b2ad7c0ccda415c258
-
SHA512
ce3df2ef537fda66e7210fa10a2f767dde81cd69501c1c7cc5bf1e3f368569e2bccb91132026a2a34a71b5c04aa1c56730a29e997b25ceee1b79438e6ad244e5
-
SSDEEP
12288:FX2NIwHFTQLKZapgbC0tIIl/QTACm/Uby:uIyFTQLK8pgbCiLl/h8by
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-