General
-
Target
dbbabc7284803b37c50570e108708687_JaffaCakes118
-
Size
3.3MB
-
Sample
240912-d1jhesygmc
-
MD5
dbbabc7284803b37c50570e108708687
-
SHA1
d1a6044c05dbf0e326999201c72e005b4cf95417
-
SHA256
9518a4ca076ec9339d6fee8df890e34e291a778756bad1765dacdc5c97963500
-
SHA512
aec0de0a019acf49df65e4a304150b6d79a374678dcbe17260b5ed4232cbb58477d720e6363896d5e2ec448bd2440679e927f59e59cb3254e6cf54d8c4504227
-
SSDEEP
98304:tq3EoG9eb2cuidK6XvwLOEUwo09YbiW1j/ry:U3EoG9equ5I927b71re
Behavioral task
behavioral1
Sample
dbbabc7284803b37c50570e108708687_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
dbbabc7284803b37c50570e108708687_JaffaCakes118
-
Size
3.3MB
-
MD5
dbbabc7284803b37c50570e108708687
-
SHA1
d1a6044c05dbf0e326999201c72e005b4cf95417
-
SHA256
9518a4ca076ec9339d6fee8df890e34e291a778756bad1765dacdc5c97963500
-
SHA512
aec0de0a019acf49df65e4a304150b6d79a374678dcbe17260b5ed4232cbb58477d720e6363896d5e2ec448bd2440679e927f59e59cb3254e6cf54d8c4504227
-
SSDEEP
98304:tq3EoG9eb2cuidK6XvwLOEUwo09YbiW1j/ry:U3EoG9equ5I927b71re
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-