General
-
Target
ee6a0423ca9a7940c286a470d2db0a43_JaffaCakes118
-
Size
120KB
-
Sample
240920-zty57axgjf
-
MD5
ee6a0423ca9a7940c286a470d2db0a43
-
SHA1
5e9e110597d77b2e40e9e4b8a253eb5fb20a085d
-
SHA256
14d150a2ea315ad6ebe5b0f6cf2093d474636c3ed7af97f5f322f56194077bf9
-
SHA512
b71979e80ba0efc858712e2b5cf17568b5b57d7a6dc34435eedb344eaee1194fb01e7647fe6679c4c7e4c45096c3d3a3c19ba9476ecfd7fa5b93e522dab9b1ca
-
SSDEEP
3072:Z9mQrWSB/WM+dCB+IF1G6sT11I0E9TAUQ+iU2r2:Z9USBOMNBNF1cxy0E9TAUQ+iU2r2
Behavioral task
behavioral1
Sample
ee6a0423ca9a7940c286a470d2db0a43_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
gootkit
308
waabitii.com
buyyou.org
pep.hheadz4life.com
trktrk.org
fields.mobi
-
vendor_id
308
Targets
-
-
Target
ee6a0423ca9a7940c286a470d2db0a43_JaffaCakes118
-
Size
120KB
-
MD5
ee6a0423ca9a7940c286a470d2db0a43
-
SHA1
5e9e110597d77b2e40e9e4b8a253eb5fb20a085d
-
SHA256
14d150a2ea315ad6ebe5b0f6cf2093d474636c3ed7af97f5f322f56194077bf9
-
SHA512
b71979e80ba0efc858712e2b5cf17568b5b57d7a6dc34435eedb344eaee1194fb01e7647fe6679c4c7e4c45096c3d3a3c19ba9476ecfd7fa5b93e522dab9b1ca
-
SSDEEP
3072:Z9mQrWSB/WM+dCB+IF1G6sT11I0E9TAUQ+iU2r2:Z9USBOMNBNF1cxy0E9TAUQ+iU2r2
-
Deletes itself
-