General
-
Target
d341c794801ad6744255ef34b9c53587_JaffaCakes118
-
Size
104KB
-
Sample
240908-b41vrsxepq
-
MD5
d341c794801ad6744255ef34b9c53587
-
SHA1
8410cffe037d0215d5272ff16d42370d517b2723
-
SHA256
cfb2c413a5ed16d65ba176f4bf07dea372d7f86686e61775d9ca2c5e77e09ac8
-
SHA512
b90be233772fed6563da1faae2d69e719596eab50196e39b3b19b583dd0ab218586bec2269b769f278318f3f8918c57fdcf3b5ede6ef697ba661481738dcb92e
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
Behavioral task
behavioral1
Sample
d341c794801ad6744255ef34b9c53587_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d341c794801ad6744255ef34b9c53587_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
lokibot
http://jajar.ru/kris/Panel/fre.php
http://kbfvzoboss.bid/alien/fre.php
http://alphastand.trade/alien/fre.php
http://alphastand.win/alien/fre.php
http://alphastand.top/alien/fre.php
Targets
-
-
Target
d341c794801ad6744255ef34b9c53587_JaffaCakes118
-
Size
104KB
-
MD5
d341c794801ad6744255ef34b9c53587
-
SHA1
8410cffe037d0215d5272ff16d42370d517b2723
-
SHA256
cfb2c413a5ed16d65ba176f4bf07dea372d7f86686e61775d9ca2c5e77e09ac8
-
SHA512
b90be233772fed6563da1faae2d69e719596eab50196e39b3b19b583dd0ab218586bec2269b769f278318f3f8918c57fdcf3b5ede6ef697ba661481738dcb92e
-
SSDEEP
1536:czvQSZpGS4/31A6mQgL2eYCGDwRcMkVQd8YhY0/EqfIzmd:nSHIG6mQwGmfOQd8YhY0/EqUG
-
Credentials from Password Stores: Credentials from Web Browsers
Malicious Access or copy of Web Browser Credential store.
-
Accesses Microsoft Outlook profiles
-