General
-
Target
3aa00668bdb6867cfe145f440dddcdec_JaffaCakes118
-
Size
5.0MB
-
Sample
240512-rz1xzaag5w
-
MD5
3aa00668bdb6867cfe145f440dddcdec
-
SHA1
d45814cd9e8f60e29183d2477d0c478aa0f0a548
-
SHA256
b05aa7875251b7dd9e6a67f22bd2e0f9ae6a47f5b1017a98d657fe3b02187e9f
-
SHA512
aebf302a5e12d4863ae83c594f0c912c046c87aca9e1c88a346c76e7fe0045c196672f6c667aa639bef68aa85536bd837ee6949b34dfc9bd07de029f70f99c29
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAk3R8yAH1plAH:+DqPoBhz1aRxcSUDk36SA73R8yAVp2H
Static task
static1
Behavioral task
behavioral1
Sample
3aa00668bdb6867cfe145f440dddcdec_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3aa00668bdb6867cfe145f440dddcdec_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
3aa00668bdb6867cfe145f440dddcdec_JaffaCakes118
-
Size
5.0MB
-
MD5
3aa00668bdb6867cfe145f440dddcdec
-
SHA1
d45814cd9e8f60e29183d2477d0c478aa0f0a548
-
SHA256
b05aa7875251b7dd9e6a67f22bd2e0f9ae6a47f5b1017a98d657fe3b02187e9f
-
SHA512
aebf302a5e12d4863ae83c594f0c912c046c87aca9e1c88a346c76e7fe0045c196672f6c667aa639bef68aa85536bd837ee6949b34dfc9bd07de029f70f99c29
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAAk3R8yAH1plAH:+DqPoBhz1aRxcSUDk36SA73R8yAVp2H
Score10/10-
Contacts a large (3215) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-