General
-
Target
8e45991da618ec2358a3a1d28dc37d40_JaffaCakes118
-
Size
92KB
-
Sample
241104-awe3naxqax
-
MD5
8e45991da618ec2358a3a1d28dc37d40
-
SHA1
5d3928af203979c20095f7a6e2123fd31cc5544b
-
SHA256
59a6f8b253d39cce6eedb4e9a0587bbb319b05686476d90700014cf5e12ba6bb
-
SHA512
a4b72c24890b2dc91ac7b29a535b8c9edc6f8519ce61859c4519c7e0330ff4b3128c97a494174da1c5bdcd6e348eb56a2d046241112eae934a0ff2e671083c2f
-
SSDEEP
1536:WJWG1TflWuJ9KgG2ikjRD6kir+y+aJE5yMeke2pToXcMK3MUJI8pHHh+TYt:WMG9NKv2xD6d+wJE5p/JCcMK33G8h1
Static task
static1
Behavioral task
behavioral1
Sample
8e45991da618ec2358a3a1d28dc37d40_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e45991da618ec2358a3a1d28dc37d40_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
pony
http://kurtst.pw:4915/doc/black.php
http://kurtst.pw:888/doc/black.php
-
payload_url
http://kytrus.pw:888/pic/Flash.exe
Targets
-
-
Target
8e45991da618ec2358a3a1d28dc37d40_JaffaCakes118
-
Size
92KB
-
MD5
8e45991da618ec2358a3a1d28dc37d40
-
SHA1
5d3928af203979c20095f7a6e2123fd31cc5544b
-
SHA256
59a6f8b253d39cce6eedb4e9a0587bbb319b05686476d90700014cf5e12ba6bb
-
SHA512
a4b72c24890b2dc91ac7b29a535b8c9edc6f8519ce61859c4519c7e0330ff4b3128c97a494174da1c5bdcd6e348eb56a2d046241112eae934a0ff2e671083c2f
-
SSDEEP
1536:WJWG1TflWuJ9KgG2ikjRD6kir+y+aJE5yMeke2pToXcMK3MUJI8pHHh+TYt:WMG9NKv2xD6d+wJE5p/JCcMK33G8h1
-
Pony family
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Hide Artifacts: Hidden Files and Directories
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3