Static task
static1
Behavioral task
behavioral1
Sample
8ba23205ad33f271477e4d4399c35e10_JaffaCakes118.ps1
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8ba23205ad33f271477e4d4399c35e10_JaffaCakes118.ps1
Resource
win10v2004-20240802-en
General
-
Target
8ba23205ad33f271477e4d4399c35e10_JaffaCakes118
-
Size
98KB
-
MD5
8ba23205ad33f271477e4d4399c35e10
-
SHA1
f0d24ea54facf6bbe38cf700ede88642cc73f64f
-
SHA256
2e57b086c74069e89faf9c6f4e316b754da5098ec3cbc88eba23c76fbec4d755
-
SHA512
9930b8a69e1811e716b8c77525dbac38fe112afdda6c21245279a994a800c6fabe5ad131996e722f5057bb112d9c5270fdcb688c369d1cb70dbcac31a6bd05d6
-
SSDEEP
1536:FxhkGAlD2tqwLHhkzAlD2tqwL4hkGzlD2tqwLv1l2bXS28fviPfhEdEJF0Mw:F+Kh21l2bXS28fviPfhEdEJA
Malware Config
Extracted
http://pakmin.yourfreehosting.net/perkakas/cmd.txt?
http://uaedesign.com/config/idfx.txt?
http://legalref.ru/cyberz/logs/fxscanlogger.php?
http://brojolelle.org/bnc/cerewet.txt?
http://legalref.ru/cyberz/installpsy.txt?
http://legalref.ru/cyberz/logs/target.txt
http://localhost/toolz/id.txt?
http://localhost/toolz/fxscanlogger.php?
http://localhost/toolz/uploadshell.txt?
http://localhost/toolz/installpsy.txt?
http://localhost/toolz/target.txt
Signatures
Files
-
8ba23205ad33f271477e4d4399c35e10_JaffaCakes118.ps1