Static task
static1
Behavioral task
behavioral1
Sample
3d329334831c3f80a9ec9830d819c207_JaffaCakes118.ps1
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3d329334831c3f80a9ec9830d819c207_JaffaCakes118.ps1
Resource
win10v2004-20240508-en
General
-
Target
3d329334831c3f80a9ec9830d819c207_JaffaCakes118
-
Size
679B
-
MD5
3d329334831c3f80a9ec9830d819c207
-
SHA1
9bdb5d7576df64551c1a1ef3cf493dafa4714643
-
SHA256
fa7c0dee3986e31ae895de69c646d524d37aec480f57d937f1575cf48f2c1240
-
SHA512
da2968c9b141f1b5735cab8b089be00f56c45cf064547dbfaee98932b623899c979ffc603a3ec7193826e29e0b6c744ca93c64cb71aaac48a9b59c36d261fa52
Malware Config
Extracted
http://ruisgood.ru/ntuser.dat
http://ruisgood.ru/config2.json
http://ruisgood.ru/ups.dat
http://ruisgood.ru/max.rar
http://ruisgood.ru/1201.rar
Signatures
Files
-
3d329334831c3f80a9ec9830d819c207_JaffaCakes118.ps1