General
-
Target
1f507c3d47a37331e838f86d302bc22f_JaffaCakes118
-
Size
779KB
-
Sample
240702-pkwcts1hre
-
MD5
1f507c3d47a37331e838f86d302bc22f
-
SHA1
32d7ecc2a759e6b13e48e3c1deb4bdc042a96849
-
SHA256
2883db8ac6bda7b29c5b8efb929601946ecefa2b21edbc032bb04a2d3ace4d82
-
SHA512
93153ab3678422ed18091761fae241320a68d28f2de9687d9de41158e4f9f71f22f173ccf4a53d4a43174c0f3d88c2b0bc953906a4ad6b66da43f8efb7b21794
-
SSDEEP
12288:vpqiC/2OGAtkCP4cejGSOpRKcQr601Hv0T:vpo/2+ttPJLfpRKcQHHcT
Static task
static1
Behavioral task
behavioral1
Sample
1f507c3d47a37331e838f86d302bc22f_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
latentbot
atualizador.zapto.org
Targets
-
-
Target
1f507c3d47a37331e838f86d302bc22f_JaffaCakes118
-
Size
779KB
-
MD5
1f507c3d47a37331e838f86d302bc22f
-
SHA1
32d7ecc2a759e6b13e48e3c1deb4bdc042a96849
-
SHA256
2883db8ac6bda7b29c5b8efb929601946ecefa2b21edbc032bb04a2d3ace4d82
-
SHA512
93153ab3678422ed18091761fae241320a68d28f2de9687d9de41158e4f9f71f22f173ccf4a53d4a43174c0f3d88c2b0bc953906a4ad6b66da43f8efb7b21794
-
SSDEEP
12288:vpqiC/2OGAtkCP4cejGSOpRKcQr601Hv0T:vpo/2+ttPJLfpRKcQHHcT
-
Drops startup file
-
Suspicious use of SetThreadContext
-