General
-
Target
fe7f65712ce141ff666b5013f137dbd6_JaffaCakes118
-
Size
238KB
-
Sample
240929-pb241stepp
-
MD5
fe7f65712ce141ff666b5013f137dbd6
-
SHA1
02dcab6bebd422ff779587780a5b56dfa58c404d
-
SHA256
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797
-
SHA512
cc611b7d164718403828e1cff35c8256f9d9abe0d3978d65719bf024e9634d31e462cd38744972ffe2c004ca86414019a5da35fe2117b56b5beca0d1497c2f47
-
SSDEEP
3072:0T0C/NrtHBG04NeX4MLuL2Ip4woXzK1FhTmtZZFJH3Tv03oXBSwXNIwRsSlqPEv:GllBG04sJa20oW1FhTm5DkoX8O5v
Static task
static1
Behavioral task
behavioral1
Sample
fe7f65712ce141ff666b5013f137dbd6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe7f65712ce141ff666b5013f137dbd6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
Guest
lapoire2.hopto.org:333
RV_MUTEX-DxjEexVoqqNL
Targets
-
-
Target
fe7f65712ce141ff666b5013f137dbd6_JaffaCakes118
-
Size
238KB
-
MD5
fe7f65712ce141ff666b5013f137dbd6
-
SHA1
02dcab6bebd422ff779587780a5b56dfa58c404d
-
SHA256
749fb97b6beff8b404936b5b366ae19ad4611d28162538a8230c22a180ec1797
-
SHA512
cc611b7d164718403828e1cff35c8256f9d9abe0d3978d65719bf024e9634d31e462cd38744972ffe2c004ca86414019a5da35fe2117b56b5beca0d1497c2f47
-
SSDEEP
3072:0T0C/NrtHBG04NeX4MLuL2Ip4woXzK1FhTmtZZFJH3Tv03oXBSwXNIwRsSlqPEv:GllBG04sJa20oW1FhTm5DkoX8O5v
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-