General
-
Target
a466c538f401f110a658ab067a54b2f6_JaffaCakes118
-
Size
1.2MB
-
Sample
240613-h7ng6syglc
-
MD5
a466c538f401f110a658ab067a54b2f6
-
SHA1
e3c1d8047c703603a8e48a28602f1f50bf46373e
-
SHA256
3cae8f947f32aa13d43a5c9ea74ee31c60e068d5862613b4db1e593b83ed98df
-
SHA512
4186433a730d77ea8cdb3fede54dbc1c4b9f9c383af4c9d1192234fda3687e7e37714f72f43680114d86ddbde6359cea2a1beda20a8d1e81a991dff8afe72d51
-
SSDEEP
24576:LyksXucAPVWJvv1A87iEogpHN8U4pDoF/5+zc/r:VWucAPEbAciEoI4uDqc
Static task
static1
Behavioral task
behavioral1
Sample
a466c538f401f110a658ab067a54b2f6_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a466c538f401f110a658ab067a54b2f6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
a466c538f401f110a658ab067a54b2f6_JaffaCakes118
-
Size
1.2MB
-
MD5
a466c538f401f110a658ab067a54b2f6
-
SHA1
e3c1d8047c703603a8e48a28602f1f50bf46373e
-
SHA256
3cae8f947f32aa13d43a5c9ea74ee31c60e068d5862613b4db1e593b83ed98df
-
SHA512
4186433a730d77ea8cdb3fede54dbc1c4b9f9c383af4c9d1192234fda3687e7e37714f72f43680114d86ddbde6359cea2a1beda20a8d1e81a991dff8afe72d51
-
SSDEEP
24576:LyksXucAPVWJvv1A87iEogpHN8U4pDoF/5+zc/r:VWucAPEbAciEoI4uDqc
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-