General
-
Target
f1d9bf3c402e1ab15bb42872c0cdde76_JaffaCakes118
-
Size
482KB
-
Sample
240415-y6npjsfc95
-
MD5
f1d9bf3c402e1ab15bb42872c0cdde76
-
SHA1
3bdd8af8eadfdd4bbe42a23c921630abe89a348e
-
SHA256
4baf8278e1ffb106a3b60a5fda8bfa2ad4da2db28e43b28dcefabf95f440b16b
-
SHA512
002ddcf56f876d523abcd2002410578f89c6ab76f30024ea134b21aef686e6ae5e64ebe4a505bd2f00821161a0f5578d218f9002820cdfaafe2a38c0f2ebb492
-
SSDEEP
12288:0et33GowDXZ2W1hk8hzen1lfPPyfs9+Iq2gI3kC:0c3WttiizefPus9TqSkC
Static task
static1
Behavioral task
behavioral1
Sample
Crack/patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Crack/patch.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
xTyFTPSetup.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
xTyFTPSetup.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
Crack/patch.exe
-
Size
42KB
-
MD5
57438e5b2425969347593e147866663a
-
SHA1
3504c76478c801fad26e71f990b0be9a14efbbb7
-
SHA256
0d87a3e6b8a2d87c4c18da9035821350410d1ed15f867c75d4006b8e022afca0
-
SHA512
fdf14dcd7058f2fd0a20b0bedcf22ac251b882025a5336d0b67be3612bd78afcdc4c42330163b777af45b65e7b95c8430f962d9ce09eab15e447d8a9c6ec95ae
-
SSDEEP
768:qraTagGiWyMZB82Jzf+UJXMyz5z/Ql/lKFPHQ1sMguof/nQroioBkUNXXwX3fJ43:qr09GiWyMI2JrZh9z/QPko2Pukyoi87z
Score7/10-
Loads dropped DLL
-
Drops file in System32 directory
-
-
-
Target
xTyFTPSetup.exe
-
Size
460KB
-
MD5
42b80b11645f035a90d4ed4b288e171b
-
SHA1
ef3a1302c6ad665ebb8b475242e206aec4891207
-
SHA256
c573962f05b157c20d5c6b1f2ad49b9398b7427a73a04a49c88552f1cc5994d5
-
SHA512
5602c1c889e9bbd684a8c77a7dab7505beded5b3132e4a4b5a7b5cbfc9f1d3743c0f8391901eff3666d765d370dd7a2753a48331caf24ccee85ebcdbc0273388
-
SSDEEP
12288:2XGuXMcb8FepMKzI+FHUnR685ZoZWFNZx0O:cZNbP2K7SR68sZ22O
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-