General
-
Target
c60812335af1cec61628b9d22617dc33_JaffaCakes118
-
Size
720KB
-
Sample
240828-b7e3ga1gqn
-
MD5
c60812335af1cec61628b9d22617dc33
-
SHA1
7622671bd74394a97c03298570efc5b60d5af25e
-
SHA256
9b6670a80a12ceaacb71ff106ce55684f288b05aa4fd0bd055079130e5242324
-
SHA512
65b7991673999e2502e85525b4b1eb9836e3314a8c1cf2f6ce08c781c8e9133dcb46d8c189307a7186d0e6c4d1b889f14c15b1f834f2223eef6392611c6d2980
-
SSDEEP
1536:vzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:USHIG6mQwGmfOQd8YhY0/EGUG
Behavioral task
behavioral1
Sample
c60812335af1cec61628b9d22617dc33_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c60812335af1cec61628b9d22617dc33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
lokibot
http://cashlogs02.icu/46182/logs/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
c60812335af1cec61628b9d22617dc33_JaffaCakes118
-
Size
720KB
-
MD5
c60812335af1cec61628b9d22617dc33
-
SHA1
7622671bd74394a97c03298570efc5b60d5af25e
-
SHA256
9b6670a80a12ceaacb71ff106ce55684f288b05aa4fd0bd055079130e5242324
-
SHA512
65b7991673999e2502e85525b4b1eb9836e3314a8c1cf2f6ce08c781c8e9133dcb46d8c189307a7186d0e6c4d1b889f14c15b1f834f2223eef6392611c6d2980
-
SSDEEP
1536:vzvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqzIzmd:USHIG6mQwGmfOQd8YhY0/EGUG
Score9/10-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-