General

  • Target

    f8154a3e3c8775337b353889a665092f_JaffaCakes118

  • Size

    53KB

  • MD5

    f8154a3e3c8775337b353889a665092f

  • SHA1

    66c877ba042f523a30e69512c7d2022b8e0b6bad

  • SHA256

    e0f0a767cd39a7f0548e4ce5cdaf7f14f00c36ffaf0bc6eb74474dc296817b8f

  • SHA512

    2bfbaa545a80955567cb2bd36a38be02e296f46a2e681f87ec3120fdaf087ed7bda756a1f833971e99c95a239617c6163f5311351b01609f4499c6c72809e6fc

  • SSDEEP

    768:8UVIUwlJBkUu5OCkUEnKNTOi2H/A/2N4G8aY:8UVIUwl/PUEqOi2YeN4X

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

IL-5

C2

http://185.244.213.64

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8154a3e3c8775337b353889a665092f_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections