General
-
Target
0082092e8ddd209a12d23d72581f7e13_JaffaCakes118
-
Size
1.8MB
-
Sample
240426-lvgewadg9t
-
MD5
0082092e8ddd209a12d23d72581f7e13
-
SHA1
5d9b8b4a3721bc023e1a9b26bd795c51e60dbb1d
-
SHA256
07e15ea44f9df0384be1b8467a181384803284d8c4be2ec8e61c95853c6ffaba
-
SHA512
5474a45e72670be117d840b8221af50377b1dd3be0fe8a82cd3f6247df7adc9a25d8adbf945bcaa6127702024e4b8827f37c4f55c1eaa417264486ca4386445d
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl5:NABm
Behavioral task
behavioral1
Sample
0082092e8ddd209a12d23d72581f7e13_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0082092e8ddd209a12d23d72581f7e13_JaffaCakes118
-
Size
1.8MB
-
MD5
0082092e8ddd209a12d23d72581f7e13
-
SHA1
5d9b8b4a3721bc023e1a9b26bd795c51e60dbb1d
-
SHA256
07e15ea44f9df0384be1b8467a181384803284d8c4be2ec8e61c95853c6ffaba
-
SHA512
5474a45e72670be117d840b8221af50377b1dd3be0fe8a82cd3f6247df7adc9a25d8adbf945bcaa6127702024e4b8827f37c4f55c1eaa417264486ca4386445d
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrl5:NABm
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-