General
- Target JaffaCakes118_b4d9f02fa75686adbfd3ee433b4a4203
- Size 209KB
- Sample250109-arn5rssnbl
- SHA256 8163d2dd713dc31d3a0a234985d7dc735d1106783a401ce585508fefc56230dc
- MD5 b4d9f02fa75686adbfd3ee433b4a4203
- SHA1 2c7d0420ca979ab6faeea5c6fdf7135963f12e87
- SHA512 bb5083ddc33af84ef768826b4b20ef3654f044cd1dfee6d81ccca5ed111446fb8c8762fb5c4c0a20ed1da19af7b40d10daf51ecd2b0e273d5ecffc4b29ed91cc
- SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ua:cnLh9yn52rpUR5vHuRYpM+a
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
JaffaCakes118_b4d9f02fa75686adbfd3ee433b4a4203.exe
Resource
win7-20241010-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
systembc
C2
-
yan0212.com:4039
-
yan0212.net:4039
Targets
-
- Target JaffaCakes118_b4d9f02fa75686adbfd3ee433b4a4203
- Size 209KB
- SHA256 8163d2dd713dc31d3a0a234985d7dc735d1106783a401ce585508fefc56230dc
- MD5 b4d9f02fa75686adbfd3ee433b4a4203
- SHA1 2c7d0420ca979ab6faeea5c6fdf7135963f12e87
- SHA512 bb5083ddc33af84ef768826b4b20ef3654f044cd1dfee6d81ccca5ed111446fb8c8762fb5c4c0a20ed1da19af7b40d10daf51ecd2b0e273d5ecffc4b29ed91cc
- SSDEEP 6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1Ua:cnLh9yn52rpUR5vHuRYpM+a
- MD5 SHA1 SHA512 SSDEEP
-
Systembc family
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.