General
-
Target
27554181da0fcc076c77efa2a38b4c0a_JaffaCakes118
-
Size
5.0MB
-
Sample
240509-aadmpsfa7t
-
MD5
27554181da0fcc076c77efa2a38b4c0a
-
SHA1
272f3944342dd99f9774b1399a6e40c1db65ebcb
-
SHA256
34bad26f44899f682f3d85b1c860d1189656f982988013a9d80d4870f2167d1d
-
SHA512
a523d9a9acc0d973edfd5d1fd2c49ccb28f5a46ac1e70c9fb01c97005a3aeff76d0c9caf38c7040d81d2af3b406d0aef6957ce695a7ca96975512939048c6fa1
-
SSDEEP
49152:SnAQqMSPbcBVQej/ZXvxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBhzZ/xWa9P593R8yAVp2H
Static task
static1
Behavioral task
behavioral1
Sample
27554181da0fcc076c77efa2a38b4c0a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27554181da0fcc076c77efa2a38b4c0a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
27554181da0fcc076c77efa2a38b4c0a_JaffaCakes118
-
Size
5.0MB
-
MD5
27554181da0fcc076c77efa2a38b4c0a
-
SHA1
272f3944342dd99f9774b1399a6e40c1db65ebcb
-
SHA256
34bad26f44899f682f3d85b1c860d1189656f982988013a9d80d4870f2167d1d
-
SHA512
a523d9a9acc0d973edfd5d1fd2c49ccb28f5a46ac1e70c9fb01c97005a3aeff76d0c9caf38c7040d81d2af3b406d0aef6957ce695a7ca96975512939048c6fa1
-
SSDEEP
49152:SnAQqMSPbcBVQej/ZXvxJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBhzZ/xWa9P593R8yAVp2H
Score10/10-
Contacts a large (3191) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-