General
-
Target
03c1f1d1b4f6f25db55697178197e911_JaffaCakes118
-
Size
1.7MB
-
Sample
240427-2as6yahg98
-
MD5
03c1f1d1b4f6f25db55697178197e911
-
SHA1
bcdce77d95c524b2dae0bbcbc9154c8fda291e6e
-
SHA256
596606f983b800d8c5f21a4dede8d310b9b047457d42f6dd5785c244884de3d0
-
SHA512
30cabe5a72be742bd3e78ac2b59d7f78b0b6649f7c711f9acd0fbd3ee7abf026f781f4edc8186bbfc626ba4fc949cc45514016a0fc06114c4a40ea60ba3fc3d1
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKPS:NABF
Behavioral task
behavioral1
Sample
03c1f1d1b4f6f25db55697178197e911_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
03c1f1d1b4f6f25db55697178197e911_JaffaCakes118
-
Size
1.7MB
-
MD5
03c1f1d1b4f6f25db55697178197e911
-
SHA1
bcdce77d95c524b2dae0bbcbc9154c8fda291e6e
-
SHA256
596606f983b800d8c5f21a4dede8d310b9b047457d42f6dd5785c244884de3d0
-
SHA512
30cabe5a72be742bd3e78ac2b59d7f78b0b6649f7c711f9acd0fbd3ee7abf026f781f4edc8186bbfc626ba4fc949cc45514016a0fc06114c4a40ea60ba3fc3d1
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SGkMKPS:NABF
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-