General
-
Target
02322cfdb43f09ad9a15650d918b0bdd_JaffaCakes118
-
Size
1.5MB
-
Sample
240427-csptssha89
-
MD5
02322cfdb43f09ad9a15650d918b0bdd
-
SHA1
9e55262672cbc6c4b0bdee9344ec9b5dc5b1c163
-
SHA256
4f2e1bf339b671ba8d59380bcce6e719659b4829673a2433421d34bebea799ce
-
SHA512
f16553101793e9e796569d68e502f13496a5cb60dd2f915775b74a6a3db841074510f50def080791d80f1801c581a5e617e925cfd8a72bcb5acbff3e63a3876e
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S7Z0:NABr
Behavioral task
behavioral1
Sample
02322cfdb43f09ad9a15650d918b0bdd_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
02322cfdb43f09ad9a15650d918b0bdd_JaffaCakes118
-
Size
1.5MB
-
MD5
02322cfdb43f09ad9a15650d918b0bdd
-
SHA1
9e55262672cbc6c4b0bdee9344ec9b5dc5b1c163
-
SHA256
4f2e1bf339b671ba8d59380bcce6e719659b4829673a2433421d34bebea799ce
-
SHA512
f16553101793e9e796569d68e502f13496a5cb60dd2f915775b74a6a3db841074510f50def080791d80f1801c581a5e617e925cfd8a72bcb5acbff3e63a3876e
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82S7Z0:NABr
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-