General
-
Target
5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118
-
Size
428KB
-
Sample
240717-ecltbaxeja
-
MD5
5158c5c17862225a86c8a4f36f054ae2
-
SHA1
6da27200f473f8c55bb125f68314eecb2219c3dd
-
SHA256
b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806
-
SHA512
c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75
-
SSDEEP
6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHBM:B
Behavioral task
behavioral1
Sample
5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118.xls
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118.xls
Resource
win10v2004-20240709-en
Malware Config
Extracted
crimsonrat
142.234.201.80
Targets
-
-
Target
5158c5c17862225a86c8a4f36f054ae2_JaffaCakes118
-
Size
428KB
-
MD5
5158c5c17862225a86c8a4f36f054ae2
-
SHA1
6da27200f473f8c55bb125f68314eecb2219c3dd
-
SHA256
b29691ac40b8bbb12b13e84641ad20583d1387ca356850aa7b5e76b0f6c76806
-
SHA512
c006f8ce77ef7dc150f137bb876a31e8f62f58e8337f487bab17752aa9eea95070e78b791488f36a2d152a871533a8bb9ee601f0053d1a2256d9e3cec3e7fe75
-
SSDEEP
6144:LxEtjPOtioVjDGUU1qfDlavx+W2QnAHBM:B
Score10/10-
CrimsonRAT main payload
-
Executes dropped EXE
-
Loads dropped DLL
-