General
-
Target
032c9a9f1b12037913636f14c9cabb39_JaffaCakes118
-
Size
1.8MB
-
Sample
240427-nvf58ahg62
-
MD5
032c9a9f1b12037913636f14c9cabb39
-
SHA1
86bee1cb3edfe8b68500789406ce1bb90ae4e970
-
SHA256
c95dcd7b14826689e60c61cf4e93ce05f831b6377c4d4ca9cb44f5765efbde72
-
SHA512
582542e1b2059b7715371e7ea4c326bdeeecf332f6dc29e9ca75ebc8a17ab72d1cf9e846889bed1755b75cf811f0cb2d319029580467b2971f47478a61bd7346
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlg7S:NABS
Behavioral task
behavioral1
Sample
032c9a9f1b12037913636f14c9cabb39_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
032c9a9f1b12037913636f14c9cabb39_JaffaCakes118
-
Size
1.8MB
-
MD5
032c9a9f1b12037913636f14c9cabb39
-
SHA1
86bee1cb3edfe8b68500789406ce1bb90ae4e970
-
SHA256
c95dcd7b14826689e60c61cf4e93ce05f831b6377c4d4ca9cb44f5765efbde72
-
SHA512
582542e1b2059b7715371e7ea4c326bdeeecf332f6dc29e9ca75ebc8a17ab72d1cf9e846889bed1755b75cf811f0cb2d319029580467b2971f47478a61bd7346
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrlg7S:NABS
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-