General
-
Target
78f8bf2607bd58232157b444a11f1b14_JaffaCakes118
-
Size
3.6MB
-
Sample
240527-ndhygsae23
-
MD5
78f8bf2607bd58232157b444a11f1b14
-
SHA1
5d82908aa114e962d48cab4ce0485740a7f27a2e
-
SHA256
3309eca5ad0c78fe84377bd3d30627d7f969e6542012e97a53b5dc9ed1d2f227
-
SHA512
40197feda797b70647716f13099a8c3993c36c0f10ee2c0215144a11fe4af1cdce0a5775b03454889ab2e17cf8c8f6da6e47eb4024393c2db536778e84546acd
-
SSDEEP
49152:VnjJMSPbcBb/1INRx+TSqTdX1HkQo6SAARdhpk3R8yAH1plA6:ZdPoBL1aRxcSUDk36SAEdh+3R8yAVp26
Static task
static1
Behavioral task
behavioral1
Sample
78f8bf2607bd58232157b444a11f1b14_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
78f8bf2607bd58232157b444a11f1b14_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
78f8bf2607bd58232157b444a11f1b14_JaffaCakes118
-
Size
3.6MB
-
MD5
78f8bf2607bd58232157b444a11f1b14
-
SHA1
5d82908aa114e962d48cab4ce0485740a7f27a2e
-
SHA256
3309eca5ad0c78fe84377bd3d30627d7f969e6542012e97a53b5dc9ed1d2f227
-
SHA512
40197feda797b70647716f13099a8c3993c36c0f10ee2c0215144a11fe4af1cdce0a5775b03454889ab2e17cf8c8f6da6e47eb4024393c2db536778e84546acd
-
SSDEEP
49152:VnjJMSPbcBb/1INRx+TSqTdX1HkQo6SAARdhpk3R8yAH1plA6:ZdPoBL1aRxcSUDk36SAEdh+3R8yAVp26
Score10/10-
Contacts a large (3325) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-