General
-
Target
032a91c7d887886668812cd9940cf964_JaffaCakes118
-
Size
1.9MB
-
Sample
240427-nrywvshf62
-
MD5
032a91c7d887886668812cd9940cf964
-
SHA1
647a245c0dd71a20ef2c290fbf3fe7812c137dd5
-
SHA256
6d5f108ed1abb10b96ce2e9b6ebccda4b1208eede0ca4690215cd9a1d313a0d3
-
SHA512
5478345dcda9a289d67ba9e8433191329c6739454969193f72faa9cca1442dec523fbdc895dd30d3d4e66babca51ed631b49c3a667f7e16796aefee1e5b43a3b
-
SSDEEP
49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U3:NABU
Behavioral task
behavioral1
Sample
032a91c7d887886668812cd9940cf964_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Targets
-
-
Target
032a91c7d887886668812cd9940cf964_JaffaCakes118
-
Size
1.9MB
-
MD5
032a91c7d887886668812cd9940cf964
-
SHA1
647a245c0dd71a20ef2c290fbf3fe7812c137dd5
-
SHA256
6d5f108ed1abb10b96ce2e9b6ebccda4b1208eede0ca4690215cd9a1d313a0d3
-
SHA512
5478345dcda9a289d67ba9e8433191329c6739454969193f72faa9cca1442dec523fbdc895dd30d3d4e66babca51ed631b49c3a667f7e16796aefee1e5b43a3b
-
SSDEEP
49152:Lz071uv4BPMkibTIA5KIP7nTrmBhihM5xC+U3:NABU
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-