General
-
Target
2fa54fc3b95fae13e1cfc94e31d076eb_JaffaCakes118
-
Size
93KB
-
Sample
241009-mqk3ya1arp
-
MD5
2fa54fc3b95fae13e1cfc94e31d076eb
-
SHA1
bbdc072619664ed3673d2567f42f957d809ced69
-
SHA256
38fc5b89b7819febe865e4bfb4a4ea69eb60787e55938382d720ae6dd87f73f3
-
SHA512
ae51f7f76fd7dee9e7d668826a524fffa6b06a02f436309b3eb14e3c6898f9698e291743437ef4bfe522b1dd1672ffa76b4d3ecbb3767a55b69b1a4804988465
-
SSDEEP
1536:pGZQbiNSO+aKd6ecNHs1uvNIpR+qaoVsQvmhTW8jr/ZFfvqgLrixeTnYNjyd+m2m:IZQONSbPdh0DIpxao7WW8nhFdLr1YNjY
Static task
static1
Behavioral task
behavioral1
Sample
2fa54fc3b95fae13e1cfc94e31d076eb_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
pony
http://78.129.132.239:8080/ponychin/gate.php
http://subdatapro.com:8008/ponychin/gate.php
-
payload_url
http://atprints.com/Bs360o59/WD3Eos3m.exe
http://propositoturismo.com.br/RW0Cs5qX/dpiC4A.exe
http://20percedzes.hu/zF1yvTwP/HXJE9.exe
Targets
-
-
Target
2fa54fc3b95fae13e1cfc94e31d076eb_JaffaCakes118
-
Size
93KB
-
MD5
2fa54fc3b95fae13e1cfc94e31d076eb
-
SHA1
bbdc072619664ed3673d2567f42f957d809ced69
-
SHA256
38fc5b89b7819febe865e4bfb4a4ea69eb60787e55938382d720ae6dd87f73f3
-
SHA512
ae51f7f76fd7dee9e7d668826a524fffa6b06a02f436309b3eb14e3c6898f9698e291743437ef4bfe522b1dd1672ffa76b4d3ecbb3767a55b69b1a4804988465
-
SSDEEP
1536:pGZQbiNSO+aKd6ecNHs1uvNIpR+qaoVsQvmhTW8jr/ZFfvqgLrixeTnYNjyd+m2m:IZQONSbPdh0DIpxao7WW8nhFdLr1YNjY
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-