General
-
Target
ef497db08eb237cbba60985baf68db24_JaffaCakes118
-
Size
485KB
-
Sample
240412-gsz2zsbd2w
-
MD5
ef497db08eb237cbba60985baf68db24
-
SHA1
05bb3dd0e475d6a88aad4cc6d1b1c83d88df02bf
-
SHA256
3009ae481472637a3e35d4448ed5c5c24ad823c0caf60ecc99e717757aef8eff
-
SHA512
8702c2d2a09161d10b49d1ffd36130b6fff1b88062d1e12ec889a3d07d3fb0d4d123e69069ebcfebf8b1623b8003ed1c173db1d1e11e643171df834f88b3dfc4
-
SSDEEP
12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gigu:q3hu
Static task
static1
Behavioral task
behavioral1
Sample
ef497db08eb237cbba60985baf68db24_JaffaCakes118.ps1
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ef497db08eb237cbba60985baf68db24_JaffaCakes118.ps1
Resource
win10v2004-20240226-en
Malware Config
Extracted
oski
103.114.107.28/l15/
Targets
-
-
Target
ef497db08eb237cbba60985baf68db24_JaffaCakes118
-
Size
485KB
-
MD5
ef497db08eb237cbba60985baf68db24
-
SHA1
05bb3dd0e475d6a88aad4cc6d1b1c83d88df02bf
-
SHA256
3009ae481472637a3e35d4448ed5c5c24ad823c0caf60ecc99e717757aef8eff
-
SHA512
8702c2d2a09161d10b49d1ffd36130b6fff1b88062d1e12ec889a3d07d3fb0d4d123e69069ebcfebf8b1623b8003ed1c173db1d1e11e643171df834f88b3dfc4
-
SSDEEP
12288:+Zjw0RJ9u5ILYDxD3fxYehza/tw64gigu:q3hu
Score10/10-
Suspicious use of SetThreadContext
-