General
- Target 27051275caf38adcf7677e7a955adfea_JaffaCakes118
- Size 573KB
- Sample241008-3e7esssdka
- SHA256 c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536
- MD5 27051275caf38adcf7677e7a955adfea
- SHA1 cd2e048cec404185cdaeec25eb8f4a1879a4bfd0
- SHA512 128d5f42d02711b84e3c5dee045495cf89c6cdec9a68644110fdb7556b60fc61d5c56f17c1c5956f0dc61bb34c444348c04c739bdc04ac9079829b2f0d1a74ce
- SSDEEP 12288:R87H3sH2k/eJ9A9tqKsuud0Xl0pT7fEztxG9HBMbVNAbirS:RSs7/KYtqoE3MzO9HoHAs
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
27051275caf38adcf7677e7a955adfea_JaffaCakes118.dll
Resource
win7-20240903-en
Malware Config
Extracted
-
qakbot
-
402.363
-
obama107
-
1633078880
-
140.82.49.12:443
-
41.250.143.109:995
-
216.201.162.158:443
-
86.8.177.143:443
-
105.198.236.99:443
-
124.123.42.115:2222
-
217.17.56.163:443
-
37.210.152.224:995
-
190.198.206.189:2222
-
75.89.195.186:995
-
78.191.44.76:995
-
122.11.220.212:2222
-
68.186.192.69:443
-
159.2.51.200:2222
-
217.17.56.163:2222
-
217.17.56.163:2078
-
41.228.22.180:443
-
120.151.47.189:443
-
47.22.148.6:443
-
94.200.181.154:443
-
81.241.252.59:2078
-
76.25.142.196:443
-
89.101.97.139:443
-
217.17.56.163:0
-
185.250.148.74:443
-
174.54.58.170:443
-
73.130.180.25:443
-
73.52.50.32:443
-
174.59.35.191:443
-
181.118.183.94:443
-
120.150.218.241:995
-
73.230.205.91:443
-
174.54.193.186:443
-
136.232.34.70:443
-
71.74.12.34:443
-
95.77.223.148:443
-
103.148.120.144:443
-
75.188.35.168:443
-
39.52.213.1:995
-
45.46.53.140:2222
-
73.151.236.31:443
-
173.21.10.71:2222
-
24.34.58.116:443
-
62.23.194.38:443
-
62.23.194.41:995
-
47.40.196.233:2222
-
67.165.206.193:993
-
72.252.201.69:443
-
173.25.166.81:443
-
199.27.127.129:443
-
68.204.7.158:443
-
191.191.38.8:443
-
109.12.111.14:443
-
24.139.72.117:443
-
24.229.150.54:995
-
189.210.115.207:443
-
174.59.226.6:443
-
73.130.237.36:443
-
81.250.153.227:2222
-
69.253.197.100:443
-
174.59.242.9:443
-
177.130.82.197:2222
-
67.214.30.12:995
-
24.55.112.61:443
-
174.59.120.69:443
-
47.181.84.61:443
-
73.130.239.166:443
-
103.157.122.198:995
-
217.165.163.21:995
-
77.57.204.78:443
-
93.8.66.216:443
-
73.52.114.202:443
-
186.18.205.199:995
-
38.10.202.214:443
-
78.191.44.76:443
-
96.83.180.29:443
-
124.123.42.115:2078
-
105.159.144.186:995
-
27.223.92.142:995
-
109.190.253.11:2222
-
217.17.56.163:465
-
38.10.201.211:443
-
92.148.59.207:2222
-
92.157.171.41:2222
-
186.87.135.68:995
-
80.6.192.58:443
-
75.66.88.33:443
-
187.156.138.172:443
-
82.77.137.101:995
-
173.234.155.233:443
-
2.178.116.91:61202
-
73.77.87.137:443
-
182.176.112.182:443
-
96.37.113.36:993
-
162.244.227.34:443
-
92.59.35.196:2222
-
196.218.227.241:995
-
68.207.102.78:443
-
2.188.27.77:443
-
181.163.96.53:443
-
75.107.26.196:465
-
185.250.148.74:2222
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
- Target 27051275caf38adcf7677e7a955adfea_JaffaCakes118
- Size 573KB
- SHA256 c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536
- MD5 27051275caf38adcf7677e7a955adfea
- SHA1 cd2e048cec404185cdaeec25eb8f4a1879a4bfd0
- SHA512 128d5f42d02711b84e3c5dee045495cf89c6cdec9a68644110fdb7556b60fc61d5c56f17c1c5956f0dc61bb34c444348c04c739bdc04ac9079829b2f0d1a74ce
- SSDEEP 12288:R87H3sH2k/eJ9A9tqKsuud0Xl0pT7fEztxG9HBMbVNAbirS:RSs7/KYtqoE3MzO9HoHAs
- MD5 SHA1 SHA512 SSDEEP
-
Loads dropped DLL