General
-
Target
9476d1e5e154653db14527d81b3a174c_JaffaCakes118
-
Size
5.0MB
-
Sample
240604-mcdrpsda7s
-
MD5
9476d1e5e154653db14527d81b3a174c
-
SHA1
1e985a82ebb778859b778024a717bf986ac183ff
-
SHA256
63e143b51ac8e3c8fbea70721277c23591efa2f4a235da9fbcc6ef6ae4842831
-
SHA512
42b6d87dd3488095248532aa0ac94ca80b4f70f57b5305a9052da99cce6b0d76c1bb573b2134e0550fe93c9fd2a8f31472d06651654e9a145e812ab7521d0544
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRuEau3R8yAH1plAH:+DqPoBhz1aRL3R8yAVp2H
Static task
static1
Behavioral task
behavioral1
Sample
9476d1e5e154653db14527d81b3a174c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9476d1e5e154653db14527d81b3a174c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
9476d1e5e154653db14527d81b3a174c_JaffaCakes118
-
Size
5.0MB
-
MD5
9476d1e5e154653db14527d81b3a174c
-
SHA1
1e985a82ebb778859b778024a717bf986ac183ff
-
SHA256
63e143b51ac8e3c8fbea70721277c23591efa2f4a235da9fbcc6ef6ae4842831
-
SHA512
42b6d87dd3488095248532aa0ac94ca80b4f70f57b5305a9052da99cce6b0d76c1bb573b2134e0550fe93c9fd2a8f31472d06651654e9a145e812ab7521d0544
-
SSDEEP
49152:SnAQqMSPbcBVQej/1INRuEau3R8yAH1plAH:+DqPoBhz1aRL3R8yAVp2H
Score10/10-
Contacts a large (3122) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-