General
-
Target
384bb8e3c6009c75472ef44706ddcfe0_JaffaCakes118
-
Size
5.0MB
-
Sample
240711-js2xpayhle
-
MD5
384bb8e3c6009c75472ef44706ddcfe0
-
SHA1
926802147c70c1853621d01a04f2f47e0d5b3669
-
SHA256
dcb39eb8303e191e1bd95e6bd1aaf576f66c7db90e1ca4ee9133e8b66b1b0001
-
SHA512
b0e54f06d2a9ae073831ecf55cda446b40adad97599f2f3a49cfb91812c1ad54a0d6660ee700b63e6da0deb7b8b534508a1892e7503171e9c9af45e00926379d
-
SSDEEP
49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA6:TDqPoBhz1aRxcSUDk36SAX
Static task
static1
Behavioral task
behavioral1
Sample
384bb8e3c6009c75472ef44706ddcfe0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
384bb8e3c6009c75472ef44706ddcfe0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
384bb8e3c6009c75472ef44706ddcfe0_JaffaCakes118
-
Size
5.0MB
-
MD5
384bb8e3c6009c75472ef44706ddcfe0
-
SHA1
926802147c70c1853621d01a04f2f47e0d5b3669
-
SHA256
dcb39eb8303e191e1bd95e6bd1aaf576f66c7db90e1ca4ee9133e8b66b1b0001
-
SHA512
b0e54f06d2a9ae073831ecf55cda446b40adad97599f2f3a49cfb91812c1ad54a0d6660ee700b63e6da0deb7b8b534508a1892e7503171e9c9af45e00926379d
-
SSDEEP
49152:znAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA6:TDqPoBhz1aRxcSUDk36SAX
Score10/10-
Contacts a large (3193) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-