General
-
Target
JaffaCakes118_4a214f6d4b7e901a5971625216309d97
-
Size
606KB
-
Sample
250107-dnnava1paw
-
MD5
4a214f6d4b7e901a5971625216309d97
-
SHA1
539ca0a658f41d1b8451c31bd6d1f1b57a95856b
-
SHA256
86433799d988249d068f359d031290b2b2fafec2a1934326badb0d2c9b68c7ee
-
SHA512
7b692770f61122f055015c9ee2265f17e9fd7dfc01ba909b1109b62b5719febc7281bbf0871270b8e9416759a608b552703e808ddeddcebd7ccc6af219f54be0
-
SSDEEP
12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31:ZaX9lAytIclhEJkIT7igcNjIB5Qg
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4a214f6d4b7e901a5971625216309d97.exe
Resource
win7-20241023-en
Malware Config
Targets
-
-
Target
JaffaCakes118_4a214f6d4b7e901a5971625216309d97
-
Size
606KB
-
MD5
4a214f6d4b7e901a5971625216309d97
-
SHA1
539ca0a658f41d1b8451c31bd6d1f1b57a95856b
-
SHA256
86433799d988249d068f359d031290b2b2fafec2a1934326badb0d2c9b68c7ee
-
SHA512
7b692770f61122f055015c9ee2265f17e9fd7dfc01ba909b1109b62b5719febc7281bbf0871270b8e9416759a608b552703e808ddeddcebd7ccc6af219f54be0
-
SSDEEP
12288:QZo9wqaX9lAytIcWlkhfMZVJt3uITOI7RxKPgcMQolSIBxzQQUpCW31:ZaX9lAytIclhEJkIT7igcNjIB5Qg
-
44Caliber family
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-