General
-
Target
67a2e852578a44251a44b83aa139ce60_JaffaCakes118
-
Size
162KB
-
Sample
240723-pwrtsatajh
-
MD5
67a2e852578a44251a44b83aa139ce60
-
SHA1
064a6c34c3b9c7562357293ee752a96ab84a43cb
-
SHA256
1d3ea1bcd3e448de1b2ad97bf9a6004cea02cbe5f0c17e50b2a323d29ba48f5a
-
SHA512
a34d35a6bdc2a0c50b81a199628e8a397cb84aba7341bd3727496fda2fb6025c062d9f9f0f80a88fe4bb34233d15caca4749ff963dc2daf23a72ac550e2ed0ac
-
SSDEEP
3072:DQIURTXJ+MOWjvIvndGdxLyE9ctXp42v7ZIo+VeEJNeAgoIcIhekJhzG:Ds9B8qLUt54qUZ/g5tzG
Static task
static1
Behavioral task
behavioral1
Sample
67a2e852578a44251a44b83aa139ce60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67a2e852578a44251a44b83aa139ce60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$TEMP/mvbgarkl.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$TEMP/mvbgarkl.dll
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
67a2e852578a44251a44b83aa139ce60_JaffaCakes118
-
Size
162KB
-
MD5
67a2e852578a44251a44b83aa139ce60
-
SHA1
064a6c34c3b9c7562357293ee752a96ab84a43cb
-
SHA256
1d3ea1bcd3e448de1b2ad97bf9a6004cea02cbe5f0c17e50b2a323d29ba48f5a
-
SHA512
a34d35a6bdc2a0c50b81a199628e8a397cb84aba7341bd3727496fda2fb6025c062d9f9f0f80a88fe4bb34233d15caca4749ff963dc2daf23a72ac550e2ed0ac
-
SSDEEP
3072:DQIURTXJ+MOWjvIvndGdxLyE9ctXp42v7ZIo+VeEJNeAgoIcIhekJhzG:Ds9B8qLUt54qUZ/g5tzG
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
-
-
Target
$TEMP/mvbgarkl.dll
-
Size
389KB
-
MD5
c9c123fdf0e7b7124d419590ac387e0b
-
SHA1
0576403dab2da7bb94a673b5c3a252053dcd0ee4
-
SHA256
7e663835edd6b61b3ffcf93b62331dabd248399f1f656c6c98b46acebe7d1558
-
SHA512
c68e611512cadf981b95018a0ef8f20e9bdac839feaa1c8ce8bf44c95c77e69a1b698b7c0cd77dd51b1444c5028a9d9931e91041a4f1c997101f3b0c627216ba
-
SSDEEP
3072:JSDdLRf06+2TwIOj8Yuhcmf/aUc/I5yZTjlhDjCigRpXf7E0lc:J6LRfrzOnKf/5cg5uTjlVCigRpXzE0lc
Score6/10-
Adds Run key to start application
-