General

  • Target

    e9816922562088cb64815a9069713f99_JaffaCakes118

  • Size

    40KB

  • MD5

    e9816922562088cb64815a9069713f99

  • SHA1

    91d73670dca57f72b591543a4341671fc72e4e5e

  • SHA256

    366fee6848c375ae07344d5bb3a884330d6e658c3f19e3d2624f22846243c937

  • SHA512

    49a2af1d0fe2daaa447479dc42d1f1dde0f8d68eb738e2268b5188e87cc7f1dadd817f6ffca2e7eb49ce7f3d452e2e88e8abdf0900c085c22e16241127c1567c

  • SSDEEP

    768:RUONNwyReluYqUtF56MT41VeUtMD9kyU13A:hNNwyoUYqUtN2VeWMD/kw

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

J12

C2

http://5.254.118.226

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9816922562088cb64815a9069713f99_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections