General
-
Target
JaffaCakes118_bff30d2c3b71f6ad1f367460c905855751f2bc2fbbdf9a437647c9f46892a046
-
Size
1.7MB
-
Sample
241223-w1ylfsxkej
-
MD5
4b6043f9a3305604b6328c8306d1804c
-
SHA1
d8a251cde76888a6b1208bf782839114506424d4
-
SHA256
bff30d2c3b71f6ad1f367460c905855751f2bc2fbbdf9a437647c9f46892a046
-
SHA512
99543d9afe969c12e25533f4d34c2bffeca0b744c32ef17537946ff2849434c8c304ee309926819d862cb2fec1e1fe28d1b74906f730ffb746b4166abbf05cdf
-
SSDEEP
1536:XmeVN7p5lgOPKuppLW8JCeaW8x1dGYkmemN0XAgmjei+vA2gcVPQqcUF:XPNLlRCUqW8xUmN0XAg1iZ2rQqcU
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_bff30d2c3b71f6ad1f367460c905855751f2bc2fbbdf9a437647c9f46892a046.dll
Resource
win7-20240903-en
Malware Config
Extracted
trickbot
100021
rob142
181.129.85.98:443
189.112.119.205:443
189.51.118.78:443
186.121.214.106:443
49.176.188.184:443
61.69.102.170:443
213.32.252.221:443
89.46.216.2:443
103.36.79.3:443
103.108.97.51:443
95.140.217.242:443
41.175.22.226:443
190.109.169.161:443
186.159.12.18:443
190.109.171.17:443
181.196.148.202:443
186.47.75.58:443
186.42.212.30:443
190.214.21.14:443
187.108.32.133:443
201.184.226.74:443
186.159.5.177:443
- autorun
Targets
-
-
Target
JaffaCakes118_bff30d2c3b71f6ad1f367460c905855751f2bc2fbbdf9a437647c9f46892a046
-
Size
1.7MB
-
MD5
4b6043f9a3305604b6328c8306d1804c
-
SHA1
d8a251cde76888a6b1208bf782839114506424d4
-
SHA256
bff30d2c3b71f6ad1f367460c905855751f2bc2fbbdf9a437647c9f46892a046
-
SHA512
99543d9afe969c12e25533f4d34c2bffeca0b744c32ef17537946ff2849434c8c304ee309926819d862cb2fec1e1fe28d1b74906f730ffb746b4166abbf05cdf
-
SSDEEP
1536:XmeVN7p5lgOPKuppLW8JCeaW8x1dGYkmemN0XAgmjei+vA2gcVPQqcUF:XPNLlRCUqW8xUmN0XAg1iZ2rQqcU
-
Trickbot family
-