General
-
Target
4589e8f916643c5d21b413d5ddaa0105_JaffaCakes118
-
Size
417KB
-
Sample
240714-m66pkszgkg
-
MD5
4589e8f916643c5d21b413d5ddaa0105
-
SHA1
9632ee7d485059e9fe8bbc70ba55a7b45427d530
-
SHA256
9b41bf8f85747590a77dcb1f08634cc250eec349b6b3f25d640fb4cf0c69713f
-
SHA512
2b1331432a5af40320664572b3dc86f194c4ab8e1bb010389ddab4871d8e690ac4eadd0f421bf5e6974862a75ea627c502c4a5c14ee4e727e1567574cfecc34f
-
SSDEEP
3072:pwAM4NjvB4vMdq5hs5Uz/nVu4wLT+4aHBgMwYX7aVKiEgjeSTsxCatgfVapBXt:pc4vq5hs5I/nc4w0oVKiEgKaratgMZ
Static task
static1
Behavioral task
behavioral1
Sample
4589e8f916643c5d21b413d5ddaa0105_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4589e8f916643c5d21b413d5ddaa0105_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
asyncrat
0.5.7B
1
185.157.160.136:1973
df4Rtg34dFjwr7ujp3
-
delay
38
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
4589e8f916643c5d21b413d5ddaa0105_JaffaCakes118
-
Size
417KB
-
MD5
4589e8f916643c5d21b413d5ddaa0105
-
SHA1
9632ee7d485059e9fe8bbc70ba55a7b45427d530
-
SHA256
9b41bf8f85747590a77dcb1f08634cc250eec349b6b3f25d640fb4cf0c69713f
-
SHA512
2b1331432a5af40320664572b3dc86f194c4ab8e1bb010389ddab4871d8e690ac4eadd0f421bf5e6974862a75ea627c502c4a5c14ee4e727e1567574cfecc34f
-
SSDEEP
3072:pwAM4NjvB4vMdq5hs5Uz/nVu4wLT+4aHBgMwYX7aVKiEgjeSTsxCatgfVapBXt:pc4vq5hs5I/nc4w0oVKiEgKaratgMZ
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-