General
-
Target
4ff7ab7be09dbf4fdcd86c1fdda6382a_JaffaCakes118
-
Size
5.0MB
-
Sample
240517-rpg24sbg24
-
MD5
4ff7ab7be09dbf4fdcd86c1fdda6382a
-
SHA1
ed94e456f899ab6d41a688c2738d7290c81ae66b
-
SHA256
340a987284bda2834a8e85be466250f5dbdf43a211049d1c6e27da52cb5fd060
-
SHA512
6d7cc8f4864f5d6a9aa73fc2763b2c516879d5b9d6b8a3a3a4872431fd5e12ec9960300514a43bedbac6461a5267f6abb5e4134f69423e50e9ed263ce31466e3
-
SSDEEP
98304:TDqPoBhzO6SAEdhvxWa9P593R8yAVp2H:TDqPeOZAEUadzR8yc4H
Static task
static1
Behavioral task
behavioral1
Sample
4ff7ab7be09dbf4fdcd86c1fdda6382a_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4ff7ab7be09dbf4fdcd86c1fdda6382a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
4ff7ab7be09dbf4fdcd86c1fdda6382a_JaffaCakes118
-
Size
5.0MB
-
MD5
4ff7ab7be09dbf4fdcd86c1fdda6382a
-
SHA1
ed94e456f899ab6d41a688c2738d7290c81ae66b
-
SHA256
340a987284bda2834a8e85be466250f5dbdf43a211049d1c6e27da52cb5fd060
-
SHA512
6d7cc8f4864f5d6a9aa73fc2763b2c516879d5b9d6b8a3a3a4872431fd5e12ec9960300514a43bedbac6461a5267f6abb5e4134f69423e50e9ed263ce31466e3
-
SSDEEP
98304:TDqPoBhzO6SAEdhvxWa9P593R8yAVp2H:TDqPeOZAEUadzR8yc4H
Score10/10-
Contacts a large (3176) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-