General
-
Target
513d519a1542b8ae4c25cc02cff2d2e3_JaffaCakes118
-
Size
5.0MB
-
Sample
240517-yrmtpsgd82
-
MD5
513d519a1542b8ae4c25cc02cff2d2e3
-
SHA1
5bf8da7dfc2fd5b756a59ee7325ec2ab45e6cc2d
-
SHA256
c687a8a161b7722282c35d4413b14ba454001a509850a64cd35050481a8cf60f
-
SHA512
1740e4ed73d61682e0fba185d045fa25c5ffee45b37177bf00292e1168d09c9964f14f86f49475f1b7fe125de23524334ea9d7ba2b96585470166c48aa4e9d44
-
SSDEEP
98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR
Static task
static1
Behavioral task
behavioral1
Sample
513d519a1542b8ae4c25cc02cff2d2e3_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
513d519a1542b8ae4c25cc02cff2d2e3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
513d519a1542b8ae4c25cc02cff2d2e3_JaffaCakes118
-
Size
5.0MB
-
MD5
513d519a1542b8ae4c25cc02cff2d2e3
-
SHA1
5bf8da7dfc2fd5b756a59ee7325ec2ab45e6cc2d
-
SHA256
c687a8a161b7722282c35d4413b14ba454001a509850a64cd35050481a8cf60f
-
SHA512
1740e4ed73d61682e0fba185d045fa25c5ffee45b37177bf00292e1168d09c9964f14f86f49475f1b7fe125de23524334ea9d7ba2b96585470166c48aa4e9d44
-
SSDEEP
98304:TDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R:TDqPe1Cxcxk3ZAEUadzR
Score10/10-
Contacts a large (3277) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-