General
-
Target
4df36fc85e781b72cb479f2559cc6704_JaffaCakes118
-
Size
5.0MB
-
Sample
240517-cbcsxacc38
-
MD5
4df36fc85e781b72cb479f2559cc6704
-
SHA1
eb34a21c9ebedaf7f5e3d5eb5b89a80774eac945
-
SHA256
8af0930d043642283db87908a19b32db4a79b662789dc4a18cc64033b40e28b0
-
SHA512
ccab58e9e02b63b4f6788b1a0aab002091936a1a4116d658ccb807257d16db11caabe0c736b22aebd2653d7b84a1b4343e13630e24faca4c581604dc56812a70
-
SSDEEP
24576:QbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626Wo/GsnjQ:QnAQqMSPbcBVQej/1INRAW+GsjQ
Static task
static1
Behavioral task
behavioral1
Sample
4df36fc85e781b72cb479f2559cc6704_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4df36fc85e781b72cb479f2559cc6704_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
4df36fc85e781b72cb479f2559cc6704_JaffaCakes118
-
Size
5.0MB
-
MD5
4df36fc85e781b72cb479f2559cc6704
-
SHA1
eb34a21c9ebedaf7f5e3d5eb5b89a80774eac945
-
SHA256
8af0930d043642283db87908a19b32db4a79b662789dc4a18cc64033b40e28b0
-
SHA512
ccab58e9e02b63b4f6788b1a0aab002091936a1a4116d658ccb807257d16db11caabe0c736b22aebd2653d7b84a1b4343e13630e24faca4c581604dc56812a70
-
SSDEEP
24576:QbLgddQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626Wo/GsnjQ:QnAQqMSPbcBVQej/1INRAW+GsjQ
Score10/10-
Modifies firewall policy service
-
Contacts a large (3160) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-