General
- Target 2654d2d35ce77f52a2f09784c124f924_JaffaCakes118
- Size 264KB
- Sample240329-thb9dscf25
- SHA256 60ca595c2e8c64cecf7c2f5e1bf9b6d8fa0ca96ba4003daf9681ede62244d35b
- MD5 2654d2d35ce77f52a2f09784c124f924
- SHA1 b52bd25fef4dfc4f79f63b45dcf52f9b41babc20
- SHA512 639f306c360b334e56b04058bc1a9ee4ffa4ebc361d45486ba985b225d7d3c31929e51576765e897f20e8f34ff6b06172658e6e2ac7b13e31869987b6a169ad8
- SSDEEP 3072:QmAk2R903DaYJAkwgz88ereWn/7w05g0zMcB3RUN46ILJ9+ZB5yOanny:Qmn3DaYJAV8er1nzTirIy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2654d2d35ce77f52a2f09784c124f924_JaffaCakes118.msi
Resource
win7-20240319-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2654d2d35ce77f52a2f09784c124f924_JaffaCakes118.msi
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
latam_generic_downloader
C2
-
https://xigud1pd.s3.sa-east-1.amazonaws.com/curt.pasgf
Targets
-
- Target 2654d2d35ce77f52a2f09784c124f924_JaffaCakes118
- Size 264KB
- SHA256 60ca595c2e8c64cecf7c2f5e1bf9b6d8fa0ca96ba4003daf9681ede62244d35b
- MD5 2654d2d35ce77f52a2f09784c124f924
- SHA1 b52bd25fef4dfc4f79f63b45dcf52f9b41babc20
- SHA512 639f306c360b334e56b04058bc1a9ee4ffa4ebc361d45486ba985b225d7d3c31929e51576765e897f20e8f34ff6b06172658e6e2ac7b13e31869987b6a169ad8
- SSDEEP 3072:QmAk2R903DaYJAkwgz88ereWn/7w05g0zMcB3RUN46ILJ9+ZB5yOanny:Qmn3DaYJAV8er1nzTirIy
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Blocklisted process makes network request
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.