General
-
Target
672dc12a7e174c9d43c37da653ab2a73_JaffaCakes118
-
Size
2.8MB
-
Sample
240723-mde16a1gjm
-
MD5
672dc12a7e174c9d43c37da653ab2a73
-
SHA1
ee8e3be6d277e08414a4cfa1142578cdb46a5d66
-
SHA256
c5cd032f4ccc63d93b7b3eaa7810b7a86a21d3045fe96ad7d16134970fb25a87
-
SHA512
c6dfe29db13beccb5795369fbd7495db438cb8d33d1d35c884363e80504473ac2dc4f152ed55ac7a4bde2c5c804289b2594a2270e5298ceb44c44717a27c8469
-
SSDEEP
49152:Fi7aJUT6ABButyHO5E9NcP+vUObFDg2MtH/e0O7OOn:o7oUTNXN9yP+FFg/ZeJ7OO
Static task
static1
Behavioral task
behavioral1
Sample
672dc12a7e174c9d43c37da653ab2a73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
672dc12a7e174c9d43c37da653ab2a73_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
672dc12a7e174c9d43c37da653ab2a73_JaffaCakes118
-
Size
2.8MB
-
MD5
672dc12a7e174c9d43c37da653ab2a73
-
SHA1
ee8e3be6d277e08414a4cfa1142578cdb46a5d66
-
SHA256
c5cd032f4ccc63d93b7b3eaa7810b7a86a21d3045fe96ad7d16134970fb25a87
-
SHA512
c6dfe29db13beccb5795369fbd7495db438cb8d33d1d35c884363e80504473ac2dc4f152ed55ac7a4bde2c5c804289b2594a2270e5298ceb44c44717a27c8469
-
SSDEEP
49152:Fi7aJUT6ABButyHO5E9NcP+vUObFDg2MtH/e0O7OOn:o7oUTNXN9yP+FFg/ZeJ7OO
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-