General
-
Target
4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118
-
Size
5.0MB
-
Sample
240517-kd3q4shh34
-
MD5
4f2bfd712a01aebb799326e1e1db66ff
-
SHA1
21b9dda55b3d7444b82568903d67b2d984440d08
-
SHA256
9bde5e19c245919890fee8337a38a915637eb962134858f4ba1cf52fc77e04bf
-
SHA512
f99145a414d49b6896d98e1f435b269711f51fd54e988dab974a64a77cadd37d63856eff04b779421e116f60c17be4700f1d87b54c011fb77d290561c40d885f
-
SSDEEP
98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9E3R8yAVp2H:+DqPe1Cxcxk3ZAEUaUR8yc4H
Static task
static1
Behavioral task
behavioral1
Sample
4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
4f2bfd712a01aebb799326e1e1db66ff_JaffaCakes118
-
Size
5.0MB
-
MD5
4f2bfd712a01aebb799326e1e1db66ff
-
SHA1
21b9dda55b3d7444b82568903d67b2d984440d08
-
SHA256
9bde5e19c245919890fee8337a38a915637eb962134858f4ba1cf52fc77e04bf
-
SHA512
f99145a414d49b6896d98e1f435b269711f51fd54e988dab974a64a77cadd37d63856eff04b779421e116f60c17be4700f1d87b54c011fb77d290561c40d885f
-
SSDEEP
98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9E3R8yAVp2H:+DqPe1Cxcxk3ZAEUaUR8yc4H
Score10/10-
Contacts a large (3196) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-