General
-
Target
26cff768bdc099ab279b80fc393b765d_JaffaCakes118
-
Size
178KB
-
Sample
240705-k9bx9sybpb
-
MD5
26cff768bdc099ab279b80fc393b765d
-
SHA1
0d22834c3916ed28d06b88a758176f33c75a8fe5
-
SHA256
c0dd3080dc942f6c41c3ae2dacc82b113bab3fd7a88ab5240b36f3d026098ec7
-
SHA512
fb69c6e4cbf6d104297f497edef2cbfabf1811a8f8c6a508754ba1db59df047f3b91602835a7c022601485c3fee57ad2beff72bcb0fe4bff85f494948cb74f0d
-
SSDEEP
3072:Sl/qvxMEy+ySG1GneljQDcI04v0QhCXUAwn+Je:sSxMEy+ySG1GneyDc14sEJn+0
Static task
static1
Behavioral task
behavioral1
Sample
26cff768bdc099ab279b80fc393b765d_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
pony
http://222.255.28.16:8080/pony/gate.php
http://88.119.29.2:8080/pony/gate.php
-
payload_url
http://ottolife.com.br/7qyLRunm/HQHUG2V.exe
http://comehomeonline.com/eXTo438J/btVSV.exe
http://tmaurice.com/Ud2agJws/dQfu.exe
Targets
-
-
Target
26cff768bdc099ab279b80fc393b765d_JaffaCakes118
-
Size
178KB
-
MD5
26cff768bdc099ab279b80fc393b765d
-
SHA1
0d22834c3916ed28d06b88a758176f33c75a8fe5
-
SHA256
c0dd3080dc942f6c41c3ae2dacc82b113bab3fd7a88ab5240b36f3d026098ec7
-
SHA512
fb69c6e4cbf6d104297f497edef2cbfabf1811a8f8c6a508754ba1db59df047f3b91602835a7c022601485c3fee57ad2beff72bcb0fe4bff85f494948cb74f0d
-
SSDEEP
3072:Sl/qvxMEy+ySG1GneljQDcI04v0QhCXUAwn+Je:sSxMEy+ySG1GneyDc14sEJn+0
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-