General
- Target jaffacakes118_Trojan-Mailfinder.Win32.Agent.alq.e6cc0b2d0d78f029c0a3fee2c6432882
- Size 1.7MB
- Sample261012-hj8s7sha64
- SHA256 175a389b55efc53a324933890f4d3a7ba32034dd067a980a7ebc4627e1177c88
- MD5 e6cc0b2d0d78f029c0a3fee2c6432882
- SHA1 aa361afcc5a6fdccb319841bc5266d84eafaf49b
- SHA512 115b6bd8a3fa83207f69f19e1a5631af6693ac482c334ac04406d3d80391cb52351fe197ee0589c8efb17dc89b6021ac65a433146a5c361d15a562ae53b93505
- SSDEEP 24576:s+KpP8pABSVsrAhfejomlq39Tu+WF2vBLXqirbluTOd/hDzW1w3DYOD2xExHCzYG:ULhABeki1CXzWtaoUwt7b
- TLSH T1B4858C12F681D073E4E301B592B7537A9938AB30232990D7D3D02E699F316D17B3A79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Mailfinder.Win32.Agent.alq.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Mailfinder.Win32.Agent.alq.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
sendsafe
Botnet
-
UNREGISTERED
C2
-
91.220.131.53:50003
-
91.220.131.53:50004
Attributes
-
service_name
Enterprise Mailing Service
Targets
-
- Target jaffacakes118_Trojan-Mailfinder.Win32.Agent.alq.e6cc0b2d0d78f029c0a3fee2c6432882
- Size 1.7MB
- SHA256 175a389b55efc53a324933890f4d3a7ba32034dd067a980a7ebc4627e1177c88
- MD5 e6cc0b2d0d78f029c0a3fee2c6432882
- SHA1 aa361afcc5a6fdccb319841bc5266d84eafaf49b
- SHA512 115b6bd8a3fa83207f69f19e1a5631af6693ac482c334ac04406d3d80391cb52351fe197ee0589c8efb17dc89b6021ac65a433146a5c361d15a562ae53b93505
- SSDEEP 24576:s+KpP8pABSVsrAhfejomlq39Tu+WF2vBLXqirbluTOd/hDzW1w3DYOD2xExHCzYG:ULhABeki1CXzWtaoUwt7b
- TLSH T1B4858C12F681D073E4E301B592B7537A9938AB30232990D7D3D02E699F316D17B3A79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10