General
-
Target
00570d04b40a595347232455c5efc328_JaffaCakes118
-
Size
3.6MB
-
Sample
240426-j1msqscd58
-
MD5
00570d04b40a595347232455c5efc328
-
SHA1
6b711c32f9939331b865deef7c625285299b5abe
-
SHA256
16dd65a09ebdb12da093127d8651ccacf755ad52d89f6fc3a368c22088dedbdc
-
SHA512
a31b740e81a2ada11e3da634b7b81eea28ffb953abe4cf935c38c3d6e40e9432441cf41543593aa60f7b42cafaca594ecb895a827c60dba5613df8d178e6e9cf
-
SSDEEP
98304:yDqPoBhz1aRxcSUDk36SAEdhx3R8yAVp2HI:yDqPe1Cxcxk3ZAEdR8yc4HI
Static task
static1
Behavioral task
behavioral1
Sample
00570d04b40a595347232455c5efc328_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
00570d04b40a595347232455c5efc328_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
00570d04b40a595347232455c5efc328_JaffaCakes118
-
Size
3.6MB
-
MD5
00570d04b40a595347232455c5efc328
-
SHA1
6b711c32f9939331b865deef7c625285299b5abe
-
SHA256
16dd65a09ebdb12da093127d8651ccacf755ad52d89f6fc3a368c22088dedbdc
-
SHA512
a31b740e81a2ada11e3da634b7b81eea28ffb953abe4cf935c38c3d6e40e9432441cf41543593aa60f7b42cafaca594ecb895a827c60dba5613df8d178e6e9cf
-
SSDEEP
98304:yDqPoBhz1aRxcSUDk36SAEdhx3R8yAVp2HI:yDqPe1Cxcxk3ZAEdR8yc4HI
Score10/10-
Contacts a large (2992) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-