General
-
Target
68b17a9fa338d164d7c10aec628a5dad_JaffaCakes118
-
Size
5.0MB
-
Sample
240522-1ay7hshd3v
-
MD5
68b17a9fa338d164d7c10aec628a5dad
-
SHA1
06eef729aff055f12f2e3942cde0b1dc724911ce
-
SHA256
08ed55480d8a53741a62d1c76c5d4e79b9374dc81cf28e8f4ce6f935896754c8
-
SHA512
4ac5d6869a4f8364bda19e54270aea590f39f92a9ed735a2bb316607d55d31bc6901336bc13f27854ec1b9bfbb588f124440cab9dcb4966b06ac9af72c277ee6
-
SSDEEP
98304:+DqPoBhz1aRxcSURxWa9P593R8yAVp2H:+DqPe1CxcYadzR8yc4H
Static task
static1
Behavioral task
behavioral1
Sample
68b17a9fa338d164d7c10aec628a5dad_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
68b17a9fa338d164d7c10aec628a5dad_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
68b17a9fa338d164d7c10aec628a5dad_JaffaCakes118
-
Size
5.0MB
-
MD5
68b17a9fa338d164d7c10aec628a5dad
-
SHA1
06eef729aff055f12f2e3942cde0b1dc724911ce
-
SHA256
08ed55480d8a53741a62d1c76c5d4e79b9374dc81cf28e8f4ce6f935896754c8
-
SHA512
4ac5d6869a4f8364bda19e54270aea590f39f92a9ed735a2bb316607d55d31bc6901336bc13f27854ec1b9bfbb588f124440cab9dcb4966b06ac9af72c277ee6
-
SSDEEP
98304:+DqPoBhz1aRxcSURxWa9P593R8yAVp2H:+DqPe1CxcYadzR8yc4H
Score10/10-
Contacts a large (3330) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-