General

  • Target

    d439c9323c46c157914780b4ee7122c7_JaffaCakes118

  • Size

    73KB

  • MD5

    d439c9323c46c157914780b4ee7122c7

  • SHA1

    5b4a7bed81d6fe0c71e633c71b277bd5bf41748d

  • SHA256

    d5bab9db44e9b9b27cf32442e061a4b63968ed2f1286fe8b0db0e317b17feee9

  • SHA512

    7626e73373334f49dcb07e53de78d1f6ffc39b2e00c9a5ca2768a3157483a9a2e5ba5bfe1123c33cee11fabcb4e08cfec06f055921b633b9f684e154af3058f9

  • SSDEEP

    768:1ywaHTrL2QSTy5r8nPKmlzOODITjJnBWxZhq9n8/yvBacVl0WYXnWvLzuPp:MwaVSGCPXcMIB4xZh1/0sGhY36zAp

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

SP-21

C2

http://146.70.41.157

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d439c9323c46c157914780b4ee7122c7_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections