General

  • Target

    a356f82dda82724d43d3701037268998_JaffaCakes118

  • Size

    43KB

  • MD5

    a356f82dda82724d43d3701037268998

  • SHA1

    71ff0b5dc5ce85bf8d731b0558d5accd58e364ce

  • SHA256

    b2cf9768fdb54708dfef43ee1d33bedf1481fef0de87f82918ba83f6c13bd94e

  • SHA512

    337090dfe93ef81bb03c7b6b74fcafb3d2dc195ee39808f841fed59139467095808468d1d708f4faad2d7cbe836240b460534ce16d53282e5e644940a126fc66

  • SSDEEP

    768:IwaH5zJ2T8M2ZiHzjehvw+FHsQxv962kdmQRh:IwaZzM8gHuhps2V7kIK

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

OC-8

C2

http://37.221.114.23

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a356f82dda82724d43d3701037268998_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections