General
-
Target
02a2d0a3fac5ab62dca8860ae6d12983_JaffaCakes118
-
Size
1.4MB
-
Sample
240427-haetrsdf9v
-
MD5
02a2d0a3fac5ab62dca8860ae6d12983
-
SHA1
d289ff66cbd6a13eaefe93c0d79637bb240e957d
-
SHA256
0bdf562026c08d524fbb57b6174a7217a7c83689e5fbc6fc5aaddfdfdc36b7b2
-
SHA512
f51246713c654935457720efc8acfe53122cba061feb29dd58a311afc66f5baf76bdfa93ed245008e09f8ed678b8c2d81299ccffe18349e2c48686acd96a64ae
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwge:Lz071uv4BPMkibTIA5CJ1e
Behavioral task
behavioral1
Sample
02a2d0a3fac5ab62dca8860ae6d12983_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
02a2d0a3fac5ab62dca8860ae6d12983_JaffaCakes118
-
Size
1.4MB
-
MD5
02a2d0a3fac5ab62dca8860ae6d12983
-
SHA1
d289ff66cbd6a13eaefe93c0d79637bb240e957d
-
SHA256
0bdf562026c08d524fbb57b6174a7217a7c83689e5fbc6fc5aaddfdfdc36b7b2
-
SHA512
f51246713c654935457720efc8acfe53122cba061feb29dd58a311afc66f5baf76bdfa93ed245008e09f8ed678b8c2d81299ccffe18349e2c48686acd96a64ae
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkibTJH+2Q/ynKeWYKpGncHBN/VPwge:Lz071uv4BPMkibTIA5CJ1e
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-