General
-
Target
e6a03e920acc645c14f7a4bb173c89d4_JaffaCakes118
-
Size
5.0MB
-
Sample
240917-mlny2aybjd
-
MD5
e6a03e920acc645c14f7a4bb173c89d4
-
SHA1
bdb6d7ff74bd06d17476ba67714473bdd5fdfe50
-
SHA256
a5832d6d06e0db070701957dfed2a564ea5e9f3744099c46001a9539649bf818
-
SHA512
e056cbac3dc497fa4ec1be486cd29d8a926a36df87a3bcec422d74a528f4e0706569db91fead0dfd0383d88120a798a978f1768a9c2678482e663de23640fce6
-
SSDEEP
49152:znjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:T8qPoBhz1aRxcSUDk36SAEdhv
Static task
static1
Behavioral task
behavioral1
Sample
e6a03e920acc645c14f7a4bb173c89d4_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e6a03e920acc645c14f7a4bb173c89d4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e6a03e920acc645c14f7a4bb173c89d4_JaffaCakes118
-
Size
5.0MB
-
MD5
e6a03e920acc645c14f7a4bb173c89d4
-
SHA1
bdb6d7ff74bd06d17476ba67714473bdd5fdfe50
-
SHA256
a5832d6d06e0db070701957dfed2a564ea5e9f3744099c46001a9539649bf818
-
SHA512
e056cbac3dc497fa4ec1be486cd29d8a926a36df87a3bcec422d74a528f4e0706569db91fead0dfd0383d88120a798a978f1768a9c2678482e663de23640fce6
-
SSDEEP
49152:znjQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnv:T8qPoBhz1aRxcSUDk36SAEdhv
Score10/10-
Contacts a large (3243) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory
-