General
-
Target
0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118
-
Size
61KB
-
Sample
240328-wxv16adg53
-
MD5
0cb84ba13936d8dcbc4fdd891932243f
-
SHA1
756348d07f38f9dea09962a07a8ff6bf671daace
-
SHA256
a1d8230807e2247c48b5c732ab306ed66c6db923f21d9c50a0508a1cf1e03193
-
SHA512
3cd5770fbb17b35012ad930fdc53a6358d6da320dcc4dd67ff1cd27f07f05ccb1762c80c9b67b44a9d97b3d87bad60893c2a3434eff80ff232a4da3778430039
-
SSDEEP
1536:CuWIiKAPnPMspbQ628QA8VdN6r4PEYiqlgGdKDwlGlB6519Wd0es:wIfwnPMspM6DsdNdEYV2wL519m0e
Static task
static1
Behavioral task
behavioral1
Sample
0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
asyncrat
0.5.7A
Default
172.30.1.10:7707
ifgybnendzqduj
-
delay
1
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
0cb84ba13936d8dcbc4fdd891932243f_JaffaCakes118
-
Size
61KB
-
MD5
0cb84ba13936d8dcbc4fdd891932243f
-
SHA1
756348d07f38f9dea09962a07a8ff6bf671daace
-
SHA256
a1d8230807e2247c48b5c732ab306ed66c6db923f21d9c50a0508a1cf1e03193
-
SHA512
3cd5770fbb17b35012ad930fdc53a6358d6da320dcc4dd67ff1cd27f07f05ccb1762c80c9b67b44a9d97b3d87bad60893c2a3434eff80ff232a4da3778430039
-
SSDEEP
1536:CuWIiKAPnPMspbQ628QA8VdN6r4PEYiqlgGdKDwlGlB6519Wd0es:wIfwnPMspM6DsdNdEYV2wL519m0e
-
Suspicious use of SetThreadContext
-