General
- Target jaffacakes118_zerotrace.zip
- Size 185KB
- Sample260911-y2bjesce97
- SHA256 6c81a18a5529f4d324768fd1c8eaf3dd870349b597e15e382a6178540ba97610
- MD5 565025d3f7169506e2d13943e2610ec8
- SHA1 4d6548438023f9117be307a14ccbc2b7e7261df4
- SHA512 76885affe5463f6e73451317ba51ffb8c849840a2f7fb23a7e4772eb6454c0f5ec757d785b0089378614014b67a36b4bf715122fb5a71f6c8f5c66c731ba7e9e
- SSDEEP 3072:b9NaXBA38us2NZ3bo6MRYcxuviRtnhj4SjfWXxitS5wXo:QBWfVfM6MZMghvfWXoSm4
- TLSH T18D0412C07CAD9D7066509DF9460AC3EA5E74A46FAD348C8CD90C2CE6B4973A83DDCC56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
bc6fe768b6e8ad0fbf0ad456513967662d44e2bcbb1a8c8492918f44ce43ab3f.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
bc6fe768b6e8ad0fbf0ad456513967662d44e2bcbb1a8c8492918f44ce43ab3f.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target bc6fe768b6e8ad0fbf0ad456513967662d44e2bcbb1a8c8492918f44ce43ab3f
- Size 562KB
- SHA256 bc6fe768b6e8ad0fbf0ad456513967662d44e2bcbb1a8c8492918f44ce43ab3f
- MD5 0c6a39a77fd7a0b2d12afb7fcda593f0
- SHA1 5ccedb09ba33c1f88201e45ca2e6ffbaea3a28b9
- SHA512 e0114aa629865793afd55ea0853046f0cf59e8aa0eae789ea824a42e83a9238b427759cd16ccb1a2f330a99117f1c3aa36832b2625d7dfdeb7c759d97213fca9
- SSDEEP 6144:UqYyA9ZFQ3c62Y7Rmb5L6uxm4aEGq82PtXctPRaqMYoWmbsPZP6uZQ+6I/ulzJA0:UqYyAxt3iJQXErHdmEXXEfxZv
- TLSH T122C4FB4996788E95C41466FA03FB1582A3F27CCF9B70863F5A3577A13BE16F1EC02249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
StormKitty payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.