General
-
Target
6e344b6b1c9fd13c81b90ef87f7891b4_JaffaCakes118
-
Size
5.0MB
-
Sample
240524-mks7csdh28
-
MD5
6e344b6b1c9fd13c81b90ef87f7891b4
-
SHA1
983bcf211b0a506cf31203694d54416c52b2f1aa
-
SHA256
4acc32f5b088b82bd0b849e40e22c99825a57b0d03cc2f1a6655d633c03f542f
-
SHA512
326a5d9040fa7a6a43abde242edb97e5552003e30d0d5186c7bd6fcb2375245d226e7da92dfaceddcaa5fb9cf7cd2d7fa8f835887543b56931d4cf437bf3213c
-
SSDEEP
98304:PDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2K:PDqPe1Cxcxk3ZAEUadzR8yc4K
Static task
static1
Behavioral task
behavioral1
Sample
6e344b6b1c9fd13c81b90ef87f7891b4_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6e344b6b1c9fd13c81b90ef87f7891b4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
6e344b6b1c9fd13c81b90ef87f7891b4_JaffaCakes118
-
Size
5.0MB
-
MD5
6e344b6b1c9fd13c81b90ef87f7891b4
-
SHA1
983bcf211b0a506cf31203694d54416c52b2f1aa
-
SHA256
4acc32f5b088b82bd0b849e40e22c99825a57b0d03cc2f1a6655d633c03f542f
-
SHA512
326a5d9040fa7a6a43abde242edb97e5552003e30d0d5186c7bd6fcb2375245d226e7da92dfaceddcaa5fb9cf7cd2d7fa8f835887543b56931d4cf437bf3213c
-
SSDEEP
98304:PDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2K:PDqPe1Cxcxk3ZAEUadzR8yc4K
Score10/10-
Modifies firewall policy service
-
Contacts a large (3203) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-