General
-
Target
738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118
-
Size
605KB
-
Sample
240525-22knwaee24
-
MD5
738b8d21605c24e6a8e06336e65bf71a
-
SHA1
d60090edc6a376fee742bdae9280b01437e070af
-
SHA256
8303e9e834f52a0e06bf97f7308f5195d23f8d87f6a554e7d6f2a422b4b2f62d
-
SHA512
016aceec5a235490da89d8b78c2dcd6e7950853fce3a53bce9052064c837a5e2dfb4923d7e19547942c43387b6fa375db09f7a00056566e7874e7ed9c226d8c1
-
SSDEEP
12288:ADFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:A9REfiomdRW+3FJkYB1455555555555B
Static task
static1
Behavioral task
behavioral1
Sample
738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
738b8d21605c24e6a8e06336e65bf71a_JaffaCakes118
-
Size
605KB
-
MD5
738b8d21605c24e6a8e06336e65bf71a
-
SHA1
d60090edc6a376fee742bdae9280b01437e070af
-
SHA256
8303e9e834f52a0e06bf97f7308f5195d23f8d87f6a554e7d6f2a422b4b2f62d
-
SHA512
016aceec5a235490da89d8b78c2dcd6e7950853fce3a53bce9052064c837a5e2dfb4923d7e19547942c43387b6fa375db09f7a00056566e7874e7ed9c226d8c1
-
SSDEEP
12288:ADFbpji+06AZfioD+ekdRTCzoDlxp7J1qvYhuYt1AR4Ep555555555555555555D:A9REfiomdRW+3FJkYB1455555555555B
Score9/10-
Checks for common network interception software
Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.
-
Enumerates VirtualBox registry keys
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-