General

  • Target

    e1509c589fde2272c0d20072dfe09722_JaffaCakes118

  • Size

    5.1MB

  • MD5

    e1509c589fde2272c0d20072dfe09722

  • SHA1

    81a3044e92d14f6abf9bc813e1e030f6baaed4f2

  • SHA256

    e43ae92ee7ac5cc76535867872ba06b1b96135babafedddccd3d58f38c2b882b

  • SHA512

    a83b77e326225401e0d5ff450d0563909741a42274daffcfa2ccdc736b1e244825a0024756506877e0591599c2ae57094c0edbc3bcf3bb1fdabe1a8ea4baca55

  • SSDEEP

    98304:7xlrOi7+ogZnV34M3B2uXSfjbIWPQCr1tXYJZmaqD/v1:7xB7+PqAIFfjbIWPQCr1tXYJYaqr1

Score
10/10

Malware Config

Extracted

Family

zebrocy

C2

http://37.120.140.215/develop/resources.php

Signatures

  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e1509c589fde2272c0d20072dfe09722_JaffaCakes118
    .dll regsvr32 windows:4 windows x86 arch:x86

    b7e52e9b0df3f4aa186e22376273114d


    Headers

    Imports

    Exports

    Sections