General
-
Target
60dc283da01ea9bf6be9d4ae8c71ce1b_JaffaCakes118
-
Size
2.2MB
-
Sample
240520-yhdvfaed88
-
MD5
60dc283da01ea9bf6be9d4ae8c71ce1b
-
SHA1
276a4fba0dfcf06ee1355332a4b576a567238c1b
-
SHA256
efaf5c1d718740c81ac82df815dbdeb416409a8dc8dea6941f16948fa8a14a7c
-
SHA512
b3ad24fcf0fca556fac07ead869645e0a88d161ad019e89fd8f56a7026ffc8ecc8ab20ced15c288342b12a0b5bae12fc4ce73f8c81edfbea4c79c77ca2b69e47
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9e:NABL
Behavioral task
behavioral1
Sample
60dc283da01ea9bf6be9d4ae8c71ce1b_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
60dc283da01ea9bf6be9d4ae8c71ce1b_JaffaCakes118
-
Size
2.2MB
-
MD5
60dc283da01ea9bf6be9d4ae8c71ce1b
-
SHA1
276a4fba0dfcf06ee1355332a4b576a567238c1b
-
SHA256
efaf5c1d718740c81ac82df815dbdeb416409a8dc8dea6941f16948fa8a14a7c
-
SHA512
b3ad24fcf0fca556fac07ead869645e0a88d161ad019e89fd8f56a7026ffc8ecc8ab20ced15c288342b12a0b5bae12fc4ce73f8c81edfbea4c79c77ca2b69e47
-
SSDEEP
49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTWsuT9e:NABL
-
XMRig Miner payload
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-