General

  • Target

    f833b9411d18dc2cc7184e7c316d29d9_JaffaCakes118

  • Size

    208KB

  • MD5

    f833b9411d18dc2cc7184e7c316d29d9

  • SHA1

    484f392b419195a92e501c04b3d9cd359b900782

  • SHA256

    ce652f50ab6c30d600d2c24048230ac2d99e7423c1f1950bede390f584b8aedf

  • SHA512

    6e1c1379eaaae63cf4a4f358459e276a244da399149e60f90201e8edafa3dfc5c35bec2537be99ca621b86f247d5ec68e91d901512bc09e48af0930a744804e3

  • SSDEEP

    3072:oNYViMAOcwQDll11Fl1VlAGxr4+GVOwkwokUzpGu9pRvtZYs3IxP:gp5y+G4wk+Uzp59H7I

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

MX-1

C2

http://5.254.118.242

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f833b9411d18dc2cc7184e7c316d29d9_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections