General
-
Target
c4c4438fe773e29f031758ecf324106d_JaffaCakes118
-
Size
373KB
-
Sample
240404-3kqdgadf4y
-
MD5
c4c4438fe773e29f031758ecf324106d
-
SHA1
322fdaa03edf909708eaacb14e101727100916f2
-
SHA256
1537dcb7140c459eb68c6a8e7feb716244377856bda08f9dac31cb2dcb7318a6
-
SHA512
7155861c481d6b41048bf13a24bc3978a4f6fd789738b0fdb297435d5797655c4207fabe763e92dae6a2ed75ae5854b535dc421b527f13ff1bb95e80553a5f5c
-
SSDEEP
6144:EoSCQXqgN2X9h+IHzt7eSeH9T43rqzncb/2b6QqDpqpOHkbPLQqX7tNfVXVHQLIE:tSCRgN2tJTVETE2DOS6QYpZ4QwZGEX8H
Static task
static1
Behavioral task
behavioral1
Sample
c4c4438fe773e29f031758ecf324106d_JaffaCakes118.exe
Resource
win7-20240215-en
Malware Config
Extracted
cryptbot
veoqkb22.top
morpib02.top
-
payload_url
http://tyncel11.top/download.php?file=lv.exe
Targets
-
-
Target
c4c4438fe773e29f031758ecf324106d_JaffaCakes118
-
Size
373KB
-
MD5
c4c4438fe773e29f031758ecf324106d
-
SHA1
322fdaa03edf909708eaacb14e101727100916f2
-
SHA256
1537dcb7140c459eb68c6a8e7feb716244377856bda08f9dac31cb2dcb7318a6
-
SHA512
7155861c481d6b41048bf13a24bc3978a4f6fd789738b0fdb297435d5797655c4207fabe763e92dae6a2ed75ae5854b535dc421b527f13ff1bb95e80553a5f5c
-
SSDEEP
6144:EoSCQXqgN2X9h+IHzt7eSeH9T43rqzncb/2b6QqDpqpOHkbPLQqX7tNfVXVHQLIE:tSCRgN2tJTVETE2DOS6QYpZ4QwZGEX8H
-
Deletes itself
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-