General
-
Target
ae3ee24460f5abb090d477d05f2431fc_JaffaCakes118
-
Size
496KB
-
Sample
240820-hpz39asdnp
-
MD5
ae3ee24460f5abb090d477d05f2431fc
-
SHA1
72e763bc2bdaec7de15c1986b29de0bef6027fcb
-
SHA256
bde64f0d8aad84157edd00705d6d140c5e181717976148c93d547b88d6b4c1e4
-
SHA512
2cd2b368f26c94b0d9eb151ef7df11cf41ed89c0a2f03e8de122da8bf5f25c25653231aa823a72de4e1a2aa4c3832498e42aa23a1bb2ec5b78018268bdaa4615
-
SSDEEP
12288:J1YWEJFGqCu7+Kw1A8uKQfL/g8g54yXsJ/20V/YnOcy:J1YWEJFGqd7+gbgNtsJ/5i5y
Static task
static1
Behavioral task
behavioral1
Sample
ae3ee24460f5abb090d477d05f2431fc_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
trickbot
2000033
lib158
179.42.137.102:443
191.36.152.198:443
179.42.137.104:443
179.42.137.106:443
179.42.137.108:443
202.183.12.124:443
194.190.18.122:443
103.56.207.230:443
171.103.187.218:449
171.103.189.118:449
18.139.111.104:443
179.42.137.105:443
186.4.193.75:443
171.101.229.2:449
179.42.137.107:443
103.56.43.209:449
179.42.137.110:443
45.181.207.156:443
197.44.54.162:449
179.42.137.109:443
103.59.105.226:449
45.181.207.101:443
117.196.236.205:443
72.224.45.102:449
179.42.137.111:443
96.47.239.181:443
171.100.112.190:449
117.196.239.6:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
ae3ee24460f5abb090d477d05f2431fc_JaffaCakes118
-
Size
496KB
-
MD5
ae3ee24460f5abb090d477d05f2431fc
-
SHA1
72e763bc2bdaec7de15c1986b29de0bef6027fcb
-
SHA256
bde64f0d8aad84157edd00705d6d140c5e181717976148c93d547b88d6b4c1e4
-
SHA512
2cd2b368f26c94b0d9eb151ef7df11cf41ed89c0a2f03e8de122da8bf5f25c25653231aa823a72de4e1a2aa4c3832498e42aa23a1bb2ec5b78018268bdaa4615
-
SSDEEP
12288:J1YWEJFGqCu7+Kw1A8uKQfL/g8g54yXsJ/20V/YnOcy:J1YWEJFGqd7+gbgNtsJ/5i5y
-