General
-
Target
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118
-
Size
155KB
-
Sample
241003-lc6xtazale
-
MD5
0ef25fecaf3eab11573d5dc63a5ccaae
-
SHA1
5f957fa797af8560c755bb2b39e6ea723abd9a72
-
SHA256
a723da000f365596f410b0b3ee5db364f47d974ec048a2dcb30bab0640e329f7
-
SHA512
6de7c0c423ffb4c65d708b36e34207e45135fb5e27c6ce772990dafecd88361ef0e580e8a61f2c504e65411e521d019d3e8c6f2820318c1482382c68ae750a77
-
SSDEEP
3072:BBL4XlpcDYZsGbvGbXvtwQncpKju+01feaytLhZb6WrJPn:BKluhGbC1wQdW5ab/
Static task
static1
Behavioral task
behavioral1
Sample
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
0ef25fecaf3eab11573d5dc63a5ccaae_JaffaCakes118
-
Size
155KB
-
MD5
0ef25fecaf3eab11573d5dc63a5ccaae
-
SHA1
5f957fa797af8560c755bb2b39e6ea723abd9a72
-
SHA256
a723da000f365596f410b0b3ee5db364f47d974ec048a2dcb30bab0640e329f7
-
SHA512
6de7c0c423ffb4c65d708b36e34207e45135fb5e27c6ce772990dafecd88361ef0e580e8a61f2c504e65411e521d019d3e8c6f2820318c1482382c68ae750a77
-
SSDEEP
3072:BBL4XlpcDYZsGbvGbXvtwQncpKju+01feaytLhZb6WrJPn:BKluhGbC1wQdW5ab/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-