General
-
Target
02a5c0eb3a08b4dce18cdcec9a5b3fe2_JaffaCakes118
-
Size
2.2MB
-
Sample
240427-hegtxsdb78
-
MD5
02a5c0eb3a08b4dce18cdcec9a5b3fe2
-
SHA1
0e596afaa2e32c3ce4df32091191b605890457db
-
SHA256
2eb43ad655f427beb0af824568ec08d6295aa0fe7ca5177f71198fa9359d3313
-
SHA512
28cb166207255c7b20fa8a894cb62a48e9e04bc26003f9877301e6c504acfcbad5848181b885dac6d6e0dda015dd950cff1842001bb7ff3255b3e3d67516914b
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfL:NAB2
Behavioral task
behavioral1
Sample
02a5c0eb3a08b4dce18cdcec9a5b3fe2_JaffaCakes118.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
02a5c0eb3a08b4dce18cdcec9a5b3fe2_JaffaCakes118
-
Size
2.2MB
-
MD5
02a5c0eb3a08b4dce18cdcec9a5b3fe2
-
SHA1
0e596afaa2e32c3ce4df32091191b605890457db
-
SHA256
2eb43ad655f427beb0af824568ec08d6295aa0fe7ca5177f71198fa9359d3313
-
SHA512
28cb166207255c7b20fa8a894cb62a48e9e04bc26003f9877301e6c504acfcbad5848181b885dac6d6e0dda015dd950cff1842001bb7ff3255b3e3d67516914b
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1VQx7Va4qrfL:NAB2
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-