General
-
Target
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118
-
Size
104KB
-
Sample
240520-fz687sdd55
-
MD5
5d5ec039c6e151b1d7119f9aae350c0d
-
SHA1
7a654ff2489ff36d08ff73343669a40a3c45ea73
-
SHA256
8646105621d6c01b212cede10b2fde39c70d76d8cece3bb957c2e4b5176fd9d1
-
SHA512
e76391fcc6a5fe8134831dbfc245e6f99b601a638ce7571495e597512f3a96f031d63e0db6bfc15e980944c72537a930b28144932bebfe82a687121853353fa5
-
SSDEEP
3072:Lx78Ll6UnxKC6FWhd9aP6YsaS+LQXyjPoU:F7QDxvwWhdgCYspXuo
Static task
static1
Behavioral task
behavioral1
Sample
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
gootkit
1001
pell-talak.com
gudsline.com
-
vendor_id
1001
Targets
-
-
Target
5d5ec039c6e151b1d7119f9aae350c0d_JaffaCakes118
-
Size
104KB
-
MD5
5d5ec039c6e151b1d7119f9aae350c0d
-
SHA1
7a654ff2489ff36d08ff73343669a40a3c45ea73
-
SHA256
8646105621d6c01b212cede10b2fde39c70d76d8cece3bb957c2e4b5176fd9d1
-
SHA512
e76391fcc6a5fe8134831dbfc245e6f99b601a638ce7571495e597512f3a96f031d63e0db6bfc15e980944c72537a930b28144932bebfe82a687121853353fa5
-
SSDEEP
3072:Lx78Ll6UnxKC6FWhd9aP6YsaS+LQXyjPoU:F7QDxvwWhdgCYspXuo
-
Drops file in System32 directory
-