General
-
Target
3692ccc9d25b0d69199998c43bf541d5_JaffaCakes118
-
Size
22KB
-
Sample
241011-yrs1qa1cpd
-
MD5
3692ccc9d25b0d69199998c43bf541d5
-
SHA1
d5925747b31006eeb335f726a359e7b0f41cd66f
-
SHA256
0edfa3e76deef4188fc80bc38a97403aa90caef29bd295e00b4e88155d3ce092
-
SHA512
49ed53eb49b0f3171703978016388dab7e8c8dd421b1366d0921ba7e77fd6efe5e98560967b25bf0d6aebaa7ff425374cee99dc8462674b4fac89d05c5ed5251
-
SSDEEP
384:Zr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoQaVEGmWvaNJawcudoD5:ZmOhplcsHvKWzX6HJmFqda7koQuEGmZW
Behavioral task
behavioral1
Sample
3692ccc9d25b0d69199998c43bf541d5_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
Protocol: ftp- Host:
oaa.wallst.ru - Port:
21 - Username:
u272293 - Password:
lf10bjme
Targets
-
-
Target
3692ccc9d25b0d69199998c43bf541d5_JaffaCakes118
-
Size
22KB
-
MD5
3692ccc9d25b0d69199998c43bf541d5
-
SHA1
d5925747b31006eeb335f726a359e7b0f41cd66f
-
SHA256
0edfa3e76deef4188fc80bc38a97403aa90caef29bd295e00b4e88155d3ce092
-
SHA512
49ed53eb49b0f3171703978016388dab7e8c8dd421b1366d0921ba7e77fd6efe5e98560967b25bf0d6aebaa7ff425374cee99dc8462674b4fac89d05c5ed5251
-
SSDEEP
384:Zr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoQaVEGmWvaNJawcudoD5:ZmOhplcsHvKWzX6HJmFqda7koQuEGmZW
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-