General
-
Target
7ce93e540de95b4153b953b9070d6f36_JaffaCakes118
-
Size
396KB
-
Sample
240731-spd6wsvbpg
-
MD5
7ce93e540de95b4153b953b9070d6f36
-
SHA1
2909fe83cc2754daa8223c40e0f9d2cc8291ee4f
-
SHA256
ffb5d8c941c81435ec6998e1edb72a0c3224158a87451975ecd201c11bdb4b85
-
SHA512
814a003b80a107582721be7a21903f31104b9d0499a4a233508c28601ac21c94c52c87c63f7411798aef838cb0b7cb7a59b208b1289fa1bbfed96af6330b0fe2
-
SSDEEP
12288:pli+DBCYyRl9iIgMw6T+etB7T2B5ZTzFxOUgx:9yGTxOUc
Static task
static1
Behavioral task
behavioral1
Sample
7ce93e540de95b4153b953b9070d6f36_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
qakbot
324.8
gbs02
1580990347
76.116.90.159:443
74.194.4.181:443
72.36.59.46:2222
24.55.152.50:995
72.224.159.224:2222
173.63.217.48:443
24.229.159.177:995
173.173.68.41:443
24.184.6.58:2222
74.102.83.89:443
66.222.88.126:995
174.82.131.155:995
103.131.26.32:995
189.163.230.27:2222
184.167.2.251:2222
67.87.38.242:2222
50.247.230.33:995
181.126.80.118:443
75.81.25.223:995
23.240.185.215:443
47.136.224.60:443
186.94.161.75:2222
72.90.243.117:443
172.221.45.151:443
70.164.39.91:443
24.121.254.171:443
199.102.55.87:53
137.99.224.198:443
47.153.115.154:995
174.48.72.160:443
68.1.115.106:443
68.174.15.223:443
64.250.207.110:443
69.10.105.206:443
185.219.83.73:443
12.5.37.3:443
71.80.227.238:443
201.254.92.167:443
67.60.113.253:2222
111.125.70.30:2222
67.200.146.98:2222
75.127.145.250:443
47.40.209.205:443
5.182.39.156:443
24.201.79.208:2078
80.14.209.42:2222
69.246.151.5:443
173.22.120.11:2222
71.77.231.251:443
96.244.38.23:443
35.139.67.136:443
184.74.101.234:995
97.78.107.14:443
108.54.103.234:443
72.68.30.127:443
104.33.237.6:443
100.15.35.174:443
81.147.42.227:2222
64.203.122.88:995
35.134.202.234:443
108.5.34.250:443
72.46.151.196:995
51.235.111.190:443
71.30.56.170:443
184.191.62.24:995
109.169.215.174:21
47.146.169.85:443
72.29.181.77:2078
119.235.99.3:995
192.40.225.168:443
47.40.244.237:443
108.183.200.239:443
63.155.140.103:995
184.180.157.203:2222
181.123.61.141:443
47.202.98.230:443
175.137.191.180:443
76.176.28.156:2222
96.35.170.82:2222
173.172.205.216:443
39.69.150.143:995
98.164.253.75:443
216.201.162.158:443
173.3.132.17:995
71.162.170.34:443
74.138.18.247:443
72.209.191.27:443
206.51.202.106:50002
73.142.81.221:443
206.81.88.208:443
50.37.193.77:443
197.100.13.162:995
24.110.14.40:443
66.110.247.4:443
64.19.74.29:995
72.16.212.107:465
71.226.140.73:443
70.62.160.186:6883
74.129.26.223:443
73.7.249.47:443
73.133.46.105:995
71.241.237.2:443
24.99.180.247:443
162.244.225.30:443
75.130.117.134:443
66.25.168.167:2222
72.190.124.29:443
75.64.201.214:443
74.134.35.54:443
68.100.248.78:443
117.203.228.67:443
103.105.47.65:443
75.131.239.76:995
77.159.149.74:443
73.226.220.56:443
108.39.114.84:995
108.227.161.27:443
181.197.195.138:995
174.20.126.92:995
98.118.182.96:443
76.23.204.29:443
162.244.224.166:443
75.82.228.209:443
98.252.150.180:443
24.191.227.91:2222
74.33.68.159:443
67.214.19.91:443
152.208.21.141:995
68.49.120.179:443
68.238.56.27:443
100.40.48.96:443
69.47.44.219:443
201.152.209.247:995
189.160.216.161:443
104.3.91.20:995
172.78.87.180:443
24.32.119.146:443
104.34.122.18:443
37.26.26.43:443
45.45.105.94:990
117.207.182.245:443
24.61.47.73:443
71.198.15.8:443
65.30.12.240:443
86.254.93.195:2222
81.106.46.63:443
72.218.167.183:443
144.178.132.60:995
45.45.105.94:443
73.179.236.128:443
Targets
-
-
Target
7ce93e540de95b4153b953b9070d6f36_JaffaCakes118
-
Size
396KB
-
MD5
7ce93e540de95b4153b953b9070d6f36
-
SHA1
2909fe83cc2754daa8223c40e0f9d2cc8291ee4f
-
SHA256
ffb5d8c941c81435ec6998e1edb72a0c3224158a87451975ecd201c11bdb4b85
-
SHA512
814a003b80a107582721be7a21903f31104b9d0499a4a233508c28601ac21c94c52c87c63f7411798aef838cb0b7cb7a59b208b1289fa1bbfed96af6330b0fe2
-
SSDEEP
12288:pli+DBCYyRl9iIgMw6T+etB7T2B5ZTzFxOUgx:9yGTxOUc
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-