General

  • Target

    c8048ddbfd3d1348d7ef8e0ec020c288_JaffaCakes118

  • Size

    649KB

  • MD5

    c8048ddbfd3d1348d7ef8e0ec020c288

  • SHA1

    f39cabb2f3fe44a36dfe068baa2c3772dde9f9c2

  • SHA256

    396aa072678e0b9b2275c71c03d2a5eb00eef447d994df69c4e028ea8d565c93

  • SHA512

    22e5f9be631b64e2d5c9c41ea0e9de9060345af2f875381be160d47e65925d296b43d15afbb13e84d5d8e80c2b98e691f24fa95266e0b3b6bd3b64c33633f161

  • SSDEEP

    12288:3fdHJY7l+HXNvqYU/gAhmud5Jsy67JBOvYsaKPuAWr2FOTv:vdHqEX1prAh5dgBOvYs3er2FGv

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 2 IoCs
  • Neshta family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • c8048ddbfd3d1348d7ef8e0ec020c288_JaffaCakes118
    .rar
  • dÖrk/._cache_dÖrk.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • dÖrk/LicenseKey - copia.txt
  • dÖrk/LicenseKey.txt
  • dÖrk/Porn Dorks.txt
  • dÖrk/dorklist.txt
  • dÖrk/dÖrk.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections