General
-
Target
0869471b8905e4d2b43bcf0157b2bc44_JaffaCakes118
-
Size
1.8MB
-
Sample
240429-xs88naad69
-
MD5
0869471b8905e4d2b43bcf0157b2bc44
-
SHA1
86378962795ffe6d4903c43db7b1c091ac9c2b40
-
SHA256
5298e2528d12c2a1ee7e372475bddc58afff27a1d9eedb7ca6e3b9320baa2e2a
-
SHA512
d73e391c0934468162fc08bddd6f49490e8ffe3761d0bc9598a0dad72859b3419e23d744d86d3ebf4a5c9c27373ec18f5fe5e6dad744bfa4702188d8b8c69a3a
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5N:NABT
Behavioral task
behavioral1
Sample
0869471b8905e4d2b43bcf0157b2bc44_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
0869471b8905e4d2b43bcf0157b2bc44_JaffaCakes118
-
Size
1.8MB
-
MD5
0869471b8905e4d2b43bcf0157b2bc44
-
SHA1
86378962795ffe6d4903c43db7b1c091ac9c2b40
-
SHA256
5298e2528d12c2a1ee7e372475bddc58afff27a1d9eedb7ca6e3b9320baa2e2a
-
SHA512
d73e391c0934468162fc08bddd6f49490e8ffe3761d0bc9598a0dad72859b3419e23d744d86d3ebf4a5c9c27373ec18f5fe5e6dad744bfa4702188d8b8c69a3a
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82SflDrI5N:NABT
-
XMRig Miner payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-