General
-
Target
JaffaCakes118_522e9aa3240e418311044be358c0b8d2
-
Size
283KB
-
Sample
250305-qc385syzat
-
MD5
522e9aa3240e418311044be358c0b8d2
-
SHA1
d19b8654a29ee10b304ad5d088a9133fe25dcee1
-
SHA256
4409267aa7c871b74a48c1d20373632b815d36b8f4dc7c5a5d1373b75c8cf3fa
-
SHA512
b2f84a1277610216a7a0c183ff5baa56eb1fc2e0aa783faecef0b926c6434e2148e9de6bd85152d460d148d7ec08c2f99fe6ffc469169804e76a35ab10a3b6df
-
SSDEEP
6144:jmcD66RRjK5JGmrpQsK3RD2u270jupCJsCxCB:acD663zZ2zkPaCxy
Behavioral task
behavioral1
Sample
JaffaCakes118_522e9aa3240e418311044be358c0b8d2.exe
Resource
win7-20240903-en
Malware Config
Extracted
cybergate
2.6
ÖÍíÉ
127.0.0.1:90
***MUTEX***
-
enable_keylogger
false
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
svchost.exe
-
install_file
Win_Xp.exe
-
install_flag
false
-
keylogger_enable_ftp
false
-
message_box_caption
Please try again later.
-
message_box_title
Error
-
password
abcd1234
Targets
-
-
Target
JaffaCakes118_522e9aa3240e418311044be358c0b8d2
-
Size
283KB
-
MD5
522e9aa3240e418311044be358c0b8d2
-
SHA1
d19b8654a29ee10b304ad5d088a9133fe25dcee1
-
SHA256
4409267aa7c871b74a48c1d20373632b815d36b8f4dc7c5a5d1373b75c8cf3fa
-
SHA512
b2f84a1277610216a7a0c183ff5baa56eb1fc2e0aa783faecef0b926c6434e2148e9de6bd85152d460d148d7ec08c2f99fe6ffc469169804e76a35ab10a3b6df
-
SSDEEP
6144:jmcD66RRjK5JGmrpQsK3RD2u270jupCJsCxCB:acD663zZ2zkPaCxy
-
Cybergate family
-