General
-
Target
17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118
-
Size
938KB
-
Sample
240329-efm6jshf85
-
MD5
17b447b971a4977b2bfb2c28659aa1dd
-
SHA1
4af0fc90413fffcb4f73839adcae91ccdcc7c4f0
-
SHA256
5fa490668a9963e97d956f9a3b0c746b1d16eee9a73dfba875c9a3dc0e2c0d1b
-
SHA512
a92fdc07cbf295bbf90174820a1a24b7909bd55845acd6f01ca36a2540aed822f6a9fca8d5d78052917b55355c65ad2a80cde03f285493277162691f51c39949
-
SSDEEP
24576:mm0Br6HSQDqmEO5tPO8zQEWX3PnsOiaQCWFc:mcyQDqmjtzQBkOianX
Behavioral task
behavioral1
Sample
17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
C:\Users\README-FILE-AYFLYVMK-1711684390.hta
href="mailto:uteco@atomsilo.com"><span
class="info">Email:uteco@atomsilo.com
Extracted
C:\Users\Public\ATOMSILO-README.hta
atomsilo
Email:uteco@atomsilo.com
http://mhdehvkomeabau7gsetnsrhkfign4jgnx3wajth5yb5h6kvzbd72wlqd.onion
Extracted
F:\README-FILE-JKRSODLE-1711684388.hta
href="mailto:uteco@atomsilo.com"><span
class="info">Email:uteco@atomsilo.com
Targets
-
-
Target
17b447b971a4977b2bfb2c28659aa1dd_JaffaCakes118
-
Size
938KB
-
MD5
17b447b971a4977b2bfb2c28659aa1dd
-
SHA1
4af0fc90413fffcb4f73839adcae91ccdcc7c4f0
-
SHA256
5fa490668a9963e97d956f9a3b0c746b1d16eee9a73dfba875c9a3dc0e2c0d1b
-
SHA512
a92fdc07cbf295bbf90174820a1a24b7909bd55845acd6f01ca36a2540aed822f6a9fca8d5d78052917b55355c65ad2a80cde03f285493277162691f51c39949
-
SSDEEP
24576:mm0Br6HSQDqmEO5tPO8zQEWX3PnsOiaQCWFc:mcyQDqmjtzQBkOianX
Score10/10-
Deletes itself
-
Drops startup file
-