General
-
Target
541c6da40f1e4f938b8b05ad013ccd0c_JaffaCakes118
-
Size
109KB
-
Sample
240717-wfdesasanl
-
MD5
541c6da40f1e4f938b8b05ad013ccd0c
-
SHA1
43192e28088709d41205d2db0a17c56c14c9ef93
-
SHA256
68be8b0ee5b439ad9a32edd7e202ad818efd9ed0fb1e53777d81ae90248fe5fd
-
SHA512
1f78b99b010091cfe416bf66fb6d59b1ee175cc14cd7a23cdf0381b806cc19120116c6f422bf627d7f308fe0d27a2fb940a09af2d99c1779e839e0f300a8a664
-
SSDEEP
3072:V4ot1B4/W24x2pjFQOtChgEKbLP1vteRxX:qot1i/N40puOtChgEKbLP1
Static task
static1
Behavioral task
behavioral1
Sample
541c6da40f1e4f938b8b05ad013ccd0c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
541c6da40f1e4f938b8b05ad013ccd0c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
asyncrat
0.5.7B
01FEBRERO
async2020.duckdns.org:7783
async2021.duckdns.org:7783
MUTEX3095590234NDFALKD
-
delay
3
-
install
false
-
install_file
realvnc.exe
-
install_folder
%AppData%
Targets
-
-
Target
541c6da40f1e4f938b8b05ad013ccd0c_JaffaCakes118
-
Size
109KB
-
MD5
541c6da40f1e4f938b8b05ad013ccd0c
-
SHA1
43192e28088709d41205d2db0a17c56c14c9ef93
-
SHA256
68be8b0ee5b439ad9a32edd7e202ad818efd9ed0fb1e53777d81ae90248fe5fd
-
SHA512
1f78b99b010091cfe416bf66fb6d59b1ee175cc14cd7a23cdf0381b806cc19120116c6f422bf627d7f308fe0d27a2fb940a09af2d99c1779e839e0f300a8a664
-
SSDEEP
3072:V4ot1B4/W24x2pjFQOtChgEKbLP1vteRxX:qot1i/N40puOtChgEKbLP1
Score10/10-
Async RAT payload
-
Adds Run key to start application
-