General
-
Target
00622c537d8017d912ff98d005c89143_JaffaCakes118
-
Size
3.6MB
-
Sample
240426-kf8p5scg86
-
MD5
00622c537d8017d912ff98d005c89143
-
SHA1
c7d7047b0cd7728d8833f31f2740e948b91291c7
-
SHA256
20d7176a3b709092ac33b2754a008a565da9a9b5e1244274684d01fdf2ac13b7
-
SHA512
40190e6b589426894cee6f9532d19f6a58a3f25b9cccc11ef597de5011c6cec7e6a381fef8a153289cde45525f8349bafc4c0e82e0dee5e47dad25365d4894a2
-
SSDEEP
98304:XDqPoBkaRxcSUZk36SAEdhvxWa9P593R8yAVp2HI:XDqPZCxc7k3ZAEUadzR8yc4HI
Static task
static1
Behavioral task
behavioral1
Sample
00622c537d8017d912ff98d005c89143_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00622c537d8017d912ff98d005c89143_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
00622c537d8017d912ff98d005c89143_JaffaCakes118
-
Size
3.6MB
-
MD5
00622c537d8017d912ff98d005c89143
-
SHA1
c7d7047b0cd7728d8833f31f2740e948b91291c7
-
SHA256
20d7176a3b709092ac33b2754a008a565da9a9b5e1244274684d01fdf2ac13b7
-
SHA512
40190e6b589426894cee6f9532d19f6a58a3f25b9cccc11ef597de5011c6cec7e6a381fef8a153289cde45525f8349bafc4c0e82e0dee5e47dad25365d4894a2
-
SSDEEP
98304:XDqPoBkaRxcSUZk36SAEdhvxWa9P593R8yAVp2HI:XDqPZCxc7k3ZAEUadzR8yc4HI
Score10/10-
Contacts a large (3270) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-