General
-
Target
1b899132264140c3f0c7b50d9d4d53d3_JaffaCakes118
-
Size
151KB
-
Sample
240701-q4mepsvdrd
-
MD5
1b899132264140c3f0c7b50d9d4d53d3
-
SHA1
278030fd2243a087bd444d486a83be4511987234
-
SHA256
2c5b5e6cdc7b718532572bc912e467d17702c0c61a994b205a944dcbc7588bd8
-
SHA512
3f63f034656695e7f1d20c84ae4a06fad2c24409402999313627bb33d25902d92878502902f0e76c68e169cdf926fc66d1ea83f1682e4ca286e524bd189a5d70
-
SSDEEP
3072:pK7pS4GXhfwuq9O8y+FG53ZDw+EGzDS/1GTaDZT8WWxDgc2UVbAnA9LcanJL0G6i:EpuZ+kBGC/7b6FYP
Static task
static1
Behavioral task
behavioral1
Sample
1b899132264140c3f0c7b50d9d4d53d3_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
pony
http://67.215.225.205:8080/forum/viewtopic.php
http://216.231.139.111/forum/viewtopic.php
-
payload_url
http://acwebnet.com/cueT50r.exe
http://grandfoolsderby.com/k3Jz2.exe
http://www.fahrsicherheit-cardrive.de/ZGg.exe
Targets
-
-
Target
1b899132264140c3f0c7b50d9d4d53d3_JaffaCakes118
-
Size
151KB
-
MD5
1b899132264140c3f0c7b50d9d4d53d3
-
SHA1
278030fd2243a087bd444d486a83be4511987234
-
SHA256
2c5b5e6cdc7b718532572bc912e467d17702c0c61a994b205a944dcbc7588bd8
-
SHA512
3f63f034656695e7f1d20c84ae4a06fad2c24409402999313627bb33d25902d92878502902f0e76c68e169cdf926fc66d1ea83f1682e4ca286e524bd189a5d70
-
SSDEEP
3072:pK7pS4GXhfwuq9O8y+FG53ZDw+EGzDS/1GTaDZT8WWxDgc2UVbAnA9LcanJL0G6i:EpuZ+kBGC/7b6FYP
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-