General
-
Target
430fb88c25b9ce5f5f8f6666538a214d_JaffaCakes118
-
Size
5.0MB
-
Sample
240514-zvczcagc5x
-
MD5
430fb88c25b9ce5f5f8f6666538a214d
-
SHA1
6959809a973e3b4a4a0beec37b1b774e8238ca9b
-
SHA256
957d41b5af564362c88ad2a2033c92c60f17d4ca7fe10a6805e7bf346d7b3e56
-
SHA512
15452ce796deab26209c95c347b311128fc45a4e324d3bf1eae535585beb3b1cd90df93948d33c354dcc15b377c3fa532a87902fc6b0041b054a2dd1cbbced18
-
SSDEEP
49152:SnAQqMSPbcBVQej/1IhJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBhz16Wa9P593R8yAVp2H
Static task
static1
Behavioral task
behavioral1
Sample
430fb88c25b9ce5f5f8f6666538a214d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
430fb88c25b9ce5f5f8f6666538a214d_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
430fb88c25b9ce5f5f8f6666538a214d_JaffaCakes118
-
Size
5.0MB
-
MD5
430fb88c25b9ce5f5f8f6666538a214d
-
SHA1
6959809a973e3b4a4a0beec37b1b774e8238ca9b
-
SHA256
957d41b5af564362c88ad2a2033c92c60f17d4ca7fe10a6805e7bf346d7b3e56
-
SHA512
15452ce796deab26209c95c347b311128fc45a4e324d3bf1eae535585beb3b1cd90df93948d33c354dcc15b377c3fa532a87902fc6b0041b054a2dd1cbbced18
-
SSDEEP
49152:SnAQqMSPbcBVQej/1IhJM0H9PAMEcaEau3R8yAH1plAH:+DqPoBhz16Wa9P593R8yAVp2H
Score10/10-
Contacts a large (3338) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-