General
-
Target
5f4fa1e76daa53fca0dbd4c9fb67f36c_JaffaCakes118
-
Size
234KB
-
Sample
240520-qpj12ach71
-
MD5
5f4fa1e76daa53fca0dbd4c9fb67f36c
-
SHA1
77df08a040ff244821646d3edf5e7d353423585f
-
SHA256
4d3342755a6622e79184acda622c1b9a4e49c962e99d0fb4ec2e52712648f1ed
-
SHA512
0f2a41596033021d1c48daf4903b4dd24e2a7756c1fe2f57d5457cc5655293f322549237a8a0d4ebddda33e8aa47f6bb8f460deb38bd4cf841241a9ae587948f
-
SSDEEP
3072:kjx4Azy9BGS15TNfs72havim+jVlokCTlAUQOHrazWdUAuPBN79Bt34ycLgF4IY2:kjx4AzwHDUvejVlWAUbH+WwTpBt4yLFD
Static task
static1
Behavioral task
behavioral1
Sample
5f4fa1e76daa53fca0dbd4c9fb67f36c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5f4fa1e76daa53fca0dbd4c9fb67f36c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
asyncrat
0.5.7B
Default
185.33.234.204:4784
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
5f4fa1e76daa53fca0dbd4c9fb67f36c_JaffaCakes118
-
Size
234KB
-
MD5
5f4fa1e76daa53fca0dbd4c9fb67f36c
-
SHA1
77df08a040ff244821646d3edf5e7d353423585f
-
SHA256
4d3342755a6622e79184acda622c1b9a4e49c962e99d0fb4ec2e52712648f1ed
-
SHA512
0f2a41596033021d1c48daf4903b4dd24e2a7756c1fe2f57d5457cc5655293f322549237a8a0d4ebddda33e8aa47f6bb8f460deb38bd4cf841241a9ae587948f
-
SSDEEP
3072:kjx4Azy9BGS15TNfs72havim+jVlokCTlAUQOHrazWdUAuPBN79Bt34ycLgF4IY2:kjx4AzwHDUvejVlWAUbH+WwTpBt4yLFD
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-