Resubmissions
03-10-2024 16:23
241003-twaygsvcqr 10General
-
Target
0f98f327951d3065e4e3c018179ad3e7_JaffaCakes118
-
Size
437KB
-
Sample
241003-twaygsvcqr
-
MD5
0f98f327951d3065e4e3c018179ad3e7
-
SHA1
ad7c31cddb843deb414f12bb5559a64bf749f10e
-
SHA256
104b914e642490aa18ec1b1eeeea70e288e7c6bbce699f37ac3ac8a2603a8341
-
SHA512
2c4656dea7172e9e16e6cd30ae09029f65e6b9b6f698a591e6d6c3e731bad641891a4a2564e903cb90b0bf7f177392f6c5db33697e63cd41a0103171d25b67ec
-
SSDEEP
6144:zjrzNW0NujooVXFXYqzygIWertnNQrmBPHU6fGkY48Y9sO:000ooVXFo6yBnNQrIPNGkYLS
Static task
static1
Behavioral task
behavioral1
Sample
0f98f327951d3065e4e3c018179ad3e7_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
trickbot
100019
top110
65.152.201.203:443
185.56.175.122:443
46.99.175.217:443
179.189.229.254:443
46.99.175.149:443
181.129.167.82:443
216.166.148.187:443
46.99.188.223:443
128.201.76.252:443
62.99.79.77:443
60.51.47.65:443
24.162.214.166:443
45.36.99.184:443
97.83.40.67:443
184.74.99.214:443
103.105.254.17:443
62.99.76.213:443
82.159.149.52:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
0f98f327951d3065e4e3c018179ad3e7_JaffaCakes118
-
Size
437KB
-
MD5
0f98f327951d3065e4e3c018179ad3e7
-
SHA1
ad7c31cddb843deb414f12bb5559a64bf749f10e
-
SHA256
104b914e642490aa18ec1b1eeeea70e288e7c6bbce699f37ac3ac8a2603a8341
-
SHA512
2c4656dea7172e9e16e6cd30ae09029f65e6b9b6f698a591e6d6c3e731bad641891a4a2564e903cb90b0bf7f177392f6c5db33697e63cd41a0103171d25b67ec
-
SSDEEP
6144:zjrzNW0NujooVXFXYqzygIWertnNQrmBPHU6fGkY48Y9sO:000ooVXFo6yBnNQrIPNGkYLS
-