General
-
Target
6a4efb8c17327b22a4eeb67080917079_JaffaCakes118
-
Size
5.0MB
-
Sample
240523-j478vaae2z
-
MD5
6a4efb8c17327b22a4eeb67080917079
-
SHA1
0fd519b3da2402d53075f8a2dd4b7d56328c70a9
-
SHA256
22ddd844eb93a423794a7899e15015b60871def49f9973f06c37c68a639dd0ca
-
SHA512
8b39bcb332c9605545d6656eca8b7e9660db276ada00cf8eab1289f9ee21da4631c5ac1c3d720854745951a206a7396a4d997132abe4d7d3feb5a5f8275c3d9a
-
SSDEEP
24576:JbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmi:JnjQqMSPbcBVQej/1INRx+TSqTdX1
Static task
static1
Behavioral task
behavioral1
Sample
6a4efb8c17327b22a4eeb67080917079_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6a4efb8c17327b22a4eeb67080917079_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
6a4efb8c17327b22a4eeb67080917079_JaffaCakes118
-
Size
5.0MB
-
MD5
6a4efb8c17327b22a4eeb67080917079
-
SHA1
0fd519b3da2402d53075f8a2dd4b7d56328c70a9
-
SHA256
22ddd844eb93a423794a7899e15015b60871def49f9973f06c37c68a639dd0ca
-
SHA512
8b39bcb332c9605545d6656eca8b7e9660db276ada00cf8eab1289f9ee21da4631c5ac1c3d720854745951a206a7396a4d997132abe4d7d3feb5a5f8275c3d9a
-
SSDEEP
24576:JbLgdeQhfdmMSirYbcMNgef0QeQjG/D8kIqRYoAdNLKz6626M+vbOSSqTPVXmi:JnjQqMSPbcBVQej/1INRx+TSqTdX1
Score10/10-
Contacts a large (3252) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-