Behavioral task
behavioral1
Sample
f6c6b4d83cfffbfea44b65d4315d05c0_JaffaCakes118.msi
Resource
win7-20240903-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f6c6b4d83cfffbfea44b65d4315d05c0_JaffaCakes118.msi
Resource
win10v2004-20240802-en
windows10-2004-x64
12 signatures
150 seconds
General
-
Target
f6c6b4d83cfffbfea44b65d4315d05c0_JaffaCakes118
-
Size
384KB
-
MD5
f6c6b4d83cfffbfea44b65d4315d05c0
-
SHA1
acefb1b80fd058488207cb3898ce61c37ddcc808
-
SHA256
f41313345680edbd1bf0666e8233ba0436a13ecf6c3ab98606580099748b415b
-
SHA512
b8864d3e6d505eac17403e330f3cfbde648bcc4cda07d5fc5f3c1af8ff66a2f7c2601e8e422eb171f3117494644fc54362156891b313d406ffb5c153091c5fa8
-
SSDEEP
6144:BbZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+Wk:BbZNNNzbCClCA+jp02GmWhJnav5jUX
Score
10/10
Malware Config
Signatures
-
Ratty Rat payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
f6c6b4d83cfffbfea44b65d4315d05c0_JaffaCakes118.msi