General
-
Target
25c880e42986f666ea40d453b8ca50d7_JaffaCakes118
-
Size
9.9MB
-
Sample
240508-vaej8agd88
-
MD5
25c880e42986f666ea40d453b8ca50d7
-
SHA1
4514a3188a0b21a3b19403bb3a85cb0f2ae62b57
-
SHA256
1646331b093169cd5e9ec62eede112a7166a3ac589e852b742c7eda1a819aef3
-
SHA512
116d77eb1fcf20659fe2dbc79ec5a13a4f75a857d4106c7adff189c2d0ba488e560badb5ed6507818f20f66ae265c8e419398e62d231105f008c60bbf468591b
-
SSDEEP
196608:YSVoLA2CkJ39onJ5hrZER2M+ENFJzFcguY48RmU/3ZlsPv+WD5DTY/R8CMe+YYu0:6c69c5hlER2MRFJzFcguYtN3ZW7w7Mu
Behavioral task
behavioral1
Sample
25c880e42986f666ea40d453b8ca50d7_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
25c880e42986f666ea40d453b8ca50d7_JaffaCakes118
-
Size
9.9MB
-
MD5
25c880e42986f666ea40d453b8ca50d7
-
SHA1
4514a3188a0b21a3b19403bb3a85cb0f2ae62b57
-
SHA256
1646331b093169cd5e9ec62eede112a7166a3ac589e852b742c7eda1a819aef3
-
SHA512
116d77eb1fcf20659fe2dbc79ec5a13a4f75a857d4106c7adff189c2d0ba488e560badb5ed6507818f20f66ae265c8e419398e62d231105f008c60bbf468591b
-
SSDEEP
196608:YSVoLA2CkJ39onJ5hrZER2M+ENFJzFcguY48RmU/3ZlsPv+WD5DTY/R8CMe+YYu0:6c69c5hlER2MRFJzFcguYtN3ZW7w7Mu
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-