Overview

overview

10

Static

static

10

JaffaCakes...70.exe

windows7-x64

10

JaffaCakes...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_024866204768948cbf87e36849d90f70

  • Size

    100KB

  • MD5

    024866204768948cbf87e36849d90f70

  • SHA1

    a2bdba23aea336782a3e9d123ef503a621eb3466

  • SHA256

    e19e2e1422147d3ff333a98b84ab1651420a0cfc987e38567297c4bcb416135d

  • SHA512

    e858f1b96bf9f14a880dcbc6bf602e877624f76628102f9fe213ddaae3760d953cb9a3174616cf4852ccf8a1eb98570137cb5f9a364cf4799160cbd8f3227a48

  • SSDEEP

    3072:UlmICQuNwVOv/8I6WruEPJZDUXA2M1CUci6sUJW51TrFS83FoU:WmICRmgMtWruEhZDCA2M1CUci6sUJW5V

Score
10/10
phorphiex

Malware Config

Extracted

Family

phorphiex

C2

http://185.215.113.93/

http://feedmefile.top/

http://gotsomefile.top/

http://gimmefile.top/
Wallets

15i4zgkk6g4x3eb161Ay9hMj8aZ8dswqEJpNaCY4s4C5ka17

17SBPhXtH8AxszbyEPPvFaazef6Cpup7Rg

3AcMV5pSUcxMmmcMbfSkJXRKbCrF3ysUDJ

qrzu3lahc7thkstxdsjamym2sak78j6mpy23fk3mxj

XdxqSoWqiAHKgbXP5zQabiy2kUhbtaiqmn

DAHCJcwE5y3K4nA9YGjiLWSEPmadeh7uZX

0x57af5e3E5D6CB0cA6F44D303328b4f68Edaa9E39

LKHcffQ1KFH9byXS8VdfHUYLzY9a8W4ZHg

r9Ftrva5RQP24TsK3yA5JVgDHaSSFxvt1s

TDfp7Nkqk26x6Yx7Cg4otm96HLpaUXRXfY

t1aCQnZyyAmDbuDxHvWHYJw8yHKXvGKfx2H

AJE3WzUsBvX1BWF1fcnwby28114DKpoSVm

bitcoincash:qrzu3lahc7thkstxdsjamym2sak78j6mpy23fk3mxj

4AfbdZbgJ52fg6GbKkR2gRT3DMboW1ZToGisLqu3psxsGEtXoGg8QGhdfhcYkX5He19L2qEJpG2fajSz7mxEbYQF2zCAMKs

GCY7OC7EPYI6LSMPCC54UBGNFGFMX2LJF6SCVRKS5CJD5YMHVQSGBJVW

bnb1qq5re95dlsf0l0edx8kjpurluc5uslgdgqzxnv

bc1qfqne66vggljvmreg8gz6ng8xrjtf63vrm4c40a
Attributes
  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36

Signatures

  • Phorphiex family
    phorphiex
  • Phorphiex payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_024866204768948cbf87e36849d90f70
    .exe windows:5 windows x86 arch:x86

    23ab644c44593e426ea915e5618d637d


    Headers

    Imports

    Sections