General
-
Target
48ffcb9ce1f4a1f343a1a61c50d3158b_JaffaCakes118
-
Size
5.0MB
-
Sample
240516-b64dnseh5t
-
MD5
48ffcb9ce1f4a1f343a1a61c50d3158b
-
SHA1
8d53f6804659cf85a13d3f06d7436352ba69cf63
-
SHA256
917cae9858292d53f7df36e77902feb24356df753e264a9810d7f5a6afaed77f
-
SHA512
e17601c11a9d448c8ee600c79194dd0074d2c48b4ce15ddcf13255272988d914e6b5e2e77edccaa9a390cb5bd8465d463e7792bd43d319f05e0d219111415b70
-
SSDEEP
49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9zb:TDqPoBhz1aRxcSUDk36SAEdhvxWa9
Static task
static1
Behavioral task
behavioral1
Sample
48ffcb9ce1f4a1f343a1a61c50d3158b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48ffcb9ce1f4a1f343a1a61c50d3158b_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
48ffcb9ce1f4a1f343a1a61c50d3158b_JaffaCakes118
-
Size
5.0MB
-
MD5
48ffcb9ce1f4a1f343a1a61c50d3158b
-
SHA1
8d53f6804659cf85a13d3f06d7436352ba69cf63
-
SHA256
917cae9858292d53f7df36e77902feb24356df753e264a9810d7f5a6afaed77f
-
SHA512
e17601c11a9d448c8ee600c79194dd0074d2c48b4ce15ddcf13255272988d914e6b5e2e77edccaa9a390cb5bd8465d463e7792bd43d319f05e0d219111415b70
-
SSDEEP
49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9zb:TDqPoBhz1aRxcSUDk36SAEdhvxWa9
Score10/10-
Contacts a large (3306) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-