General
- Target jaffacakes118_iBlogPro Premium Wordpress Theme.exe
- Size 893KB
- Sample260910-fn89es1vcx
- SHA256 80ce2473dc33fd43837dc5391c67c1cd2de76fa96f7fefa4ad817f14f710ae6f
- MD5 7396abe301ee96521d79d3d4015012eb
- SHA1 3c20c8a8405f13e47bdd8c555e0e528031054b62
- SHA512 6c02a52a372575436fb680ea84a191903a81295a617e66593be96249f029739f4a9b7f5ce32984379693eedb5dc37e7b9c3b65296c09e797ebffc7c1b7f3b7b5
- SSDEEP 24576:hwIxB2m6kgFlqx1/jI75Wc5BYWmQIx0SYOXct6g:hwCB21FUxyv0x0SKtl
- TLSH T15D156B32F681D4B2E1623AFC4D1BD6D5582DBE209D28545B3AF43F4C1A3DA43ED2429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_iBlogPro Premium Wordpress Theme.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_iBlogPro Premium Wordpress Theme.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_iBlogPro Premium Wordpress Theme.exe
- Size 893KB
- SHA256 80ce2473dc33fd43837dc5391c67c1cd2de76fa96f7fefa4ad817f14f710ae6f
- MD5 7396abe301ee96521d79d3d4015012eb
- SHA1 3c20c8a8405f13e47bdd8c555e0e528031054b62
- SHA512 6c02a52a372575436fb680ea84a191903a81295a617e66593be96249f029739f4a9b7f5ce32984379693eedb5dc37e7b9c3b65296c09e797ebffc7c1b7f3b7b5
- SSDEEP 24576:hwIxB2m6kgFlqx1/jI75Wc5BYWmQIx0SYOXct6g:hwCB21FUxyv0x0SKtl
- TLSH T15D156B32F681D4B2E1623AFC4D1BD6D5582DBE209D28545B3AF43F4C1A3DA43ED2429E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.