General
-
Target
ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118
-
Size
385KB
-
Sample
240410-zhjalaeb6w
-
MD5
ebf320b6b11829799e0b3584cb3328fe
-
SHA1
063db10196dbabcd75e438e79bf88f779522a064
-
SHA256
508521fd7d9500b95c5ce2d34a4ef0a561e4bb27f55ecb6429a5a7e6e4b2494d
-
SHA512
23674c07ab294de79731a093a429bd65968a71ee4aad809aae68e3487a6e2f8d144584b1343bd3eef325dd9869156b05b9e0bfd1831c1b162f89947257fe0d30
-
SSDEEP
6144:fDxtcNK9kXt+ZswkbDBlkw488W3VzHuVhBz/0rj4dJVdbpmF7hhtKB:f7cNQkIZszbDbh3VzH+/z/0ry/dbMBUB
Static task
static1
Behavioral task
behavioral1
Sample
ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118
-
Size
385KB
-
MD5
ebf320b6b11829799e0b3584cb3328fe
-
SHA1
063db10196dbabcd75e438e79bf88f779522a064
-
SHA256
508521fd7d9500b95c5ce2d34a4ef0a561e4bb27f55ecb6429a5a7e6e4b2494d
-
SHA512
23674c07ab294de79731a093a429bd65968a71ee4aad809aae68e3487a6e2f8d144584b1343bd3eef325dd9869156b05b9e0bfd1831c1b162f89947257fe0d30
-
SSDEEP
6144:fDxtcNK9kXt+ZswkbDBlkw488W3VzHuVhBz/0rj4dJVdbpmF7hhtKB:f7cNQkIZszbDbh3VzH+/z/0ry/dbMBUB
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-