General
-
Target
211cde45d8082cef943d553e1e9bbb7e_JaffaCakes118
-
Size
5.0MB
-
Sample
240507-vfvtdshg63
-
MD5
211cde45d8082cef943d553e1e9bbb7e
-
SHA1
fdef3c839a4004a3815f156fb25d9b8196cca60b
-
SHA256
37fd0fb006aaf3cb2e21fc67c56c419d28f5479c8cc25f9868e000e7e3105600
-
SHA512
3cfef557771d4b2b57f575971f4bcbee6f42540cfa65f86a85926d02114a33fef419227acf6d9936f3c36ddd9a92aa025b5f78e8662bf68c00737404cdd4ca4d
-
SSDEEP
24576:zbLgddQhfdmMSirYbcMNgef0QeQjG4t/8uME7A4kqAH1pNZtA0p+9XEk:znAQqMSPbcBVQej43R8yAH1plAH
Static task
static1
Behavioral task
behavioral1
Sample
211cde45d8082cef943d553e1e9bbb7e_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
211cde45d8082cef943d553e1e9bbb7e_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
211cde45d8082cef943d553e1e9bbb7e_JaffaCakes118
-
Size
5.0MB
-
MD5
211cde45d8082cef943d553e1e9bbb7e
-
SHA1
fdef3c839a4004a3815f156fb25d9b8196cca60b
-
SHA256
37fd0fb006aaf3cb2e21fc67c56c419d28f5479c8cc25f9868e000e7e3105600
-
SHA512
3cfef557771d4b2b57f575971f4bcbee6f42540cfa65f86a85926d02114a33fef419227acf6d9936f3c36ddd9a92aa025b5f78e8662bf68c00737404cdd4ca4d
-
SSDEEP
24576:zbLgddQhfdmMSirYbcMNgef0QeQjG4t/8uME7A4kqAH1pNZtA0p+9XEk:znAQqMSPbcBVQej43R8yAH1plAH
Score10/10-
Contacts a large (3158) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-