General
-
Target
0c8b34c07778881cebf9920eb8e7bb6f_JaffaCakes118
-
Size
209KB
-
Sample
241002-1ffmcsyark
-
MD5
0c8b34c07778881cebf9920eb8e7bb6f
-
SHA1
938dc8ae3f464fed4cf1e2aa1ab7a149d98d5b6f
-
SHA256
cc9213a0f464e2c554fea9927fc04380a0e6056a6bd97a492f7be0260899e1e7
-
SHA512
1ff7e7146c5e458e7263e1f5c4a6c1c4e7ce9bcca6d0df36abf383e38b31fbd49e2156e7574954a8e670927cb45dd927e6f272b20029ad4f64ced20802399bc0
-
SSDEEP
6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UE:cnLh9yn52rpUR5vHuRYpM+E
Behavioral task
behavioral1
Sample
0c8b34c07778881cebf9920eb8e7bb6f_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
systembc
yan0212.com:4039
yan0212.net:4039
Targets
-
-
Target
0c8b34c07778881cebf9920eb8e7bb6f_JaffaCakes118
-
Size
209KB
-
MD5
0c8b34c07778881cebf9920eb8e7bb6f
-
SHA1
938dc8ae3f464fed4cf1e2aa1ab7a149d98d5b6f
-
SHA256
cc9213a0f464e2c554fea9927fc04380a0e6056a6bd97a492f7be0260899e1e7
-
SHA512
1ff7e7146c5e458e7263e1f5c4a6c1c4e7ce9bcca6d0df36abf383e38b31fbd49e2156e7574954a8e670927cb45dd927e6f272b20029ad4f64ced20802399bc0
-
SSDEEP
6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UE:cnLh9yn52rpUR5vHuRYpM+E
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Uses Tor communications
Malware can proxy its traffic through Tor for more anonymity.
-