Behavioral task
behavioral1
Sample
0d966df3068e9e01c58d8d7b9402f463_JaffaCakes118.msi
Resource
win7-20231129-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d966df3068e9e01c58d8d7b9402f463_JaffaCakes118.msi
Resource
win10v2004-20240419-en
8 signatures
150 seconds
General
-
Target
0d966df3068e9e01c58d8d7b9402f463_JaffaCakes118
-
Size
967KB
-
MD5
0d966df3068e9e01c58d8d7b9402f463
-
SHA1
97c77d57a03a0e3f4b7dcc6b007b81d15b18bae6
-
SHA256
6655a03a944c8f55d9fdcc541d304f87f39cd897e97c8a9390576255fadd8197
-
SHA512
45ebeb877bc4351ad7a47e30cd0c0e568f8dc6d95e7addb07557e7992d089e161aac641f0711ac062a9ed9ce91cbc08fea26c8f7d727d109d74b20c6b6325b0c
-
SSDEEP
24576:GGOw7MAFZjiaZBuc2g4jocf6p2XHXNNpbCClCtRGLovJ+:QwHnjis3M6p2X/pbC7ALn
Score
10/10
Malware Config
Signatures
-
Ratty Rat payload 1 IoCs
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
resource yara_rule sample jar_in_msi
Files
-
0d966df3068e9e01c58d8d7b9402f463_JaffaCakes118.msi