General
-
Target
0df0550b9aff0f3d76295643b14e6e2f_JaffaCakes118
-
Size
773KB
-
Sample
241003-e6acdaycnc
-
MD5
0df0550b9aff0f3d76295643b14e6e2f
-
SHA1
42379e1586c426c6fad05276f872d0c65b0896a9
-
SHA256
bb2856cb37f56657bb00b97cbb65d8dc30ffb96a19cc44b2861087b2acc3b786
-
SHA512
a3f27094393cda06e5ba05fface5f582c4492c664dcc751a39c2e69a8675a7083f7f971e3707fcca139110469a0e662d0ab213afc825f4dec37b78427fdb5a10
-
SSDEEP
12288:vAoDQwlaoMjqKAbpUM5SLKXiL/TU9ueiy56/u6NhgHx+665str+Qh+pXJPkz:45aMgb5KTUubuogU5sYQ6Z8z
Malware Config
Targets
-
-
Target
0df0550b9aff0f3d76295643b14e6e2f_JaffaCakes118
-
Size
773KB
-
MD5
0df0550b9aff0f3d76295643b14e6e2f
-
SHA1
42379e1586c426c6fad05276f872d0c65b0896a9
-
SHA256
bb2856cb37f56657bb00b97cbb65d8dc30ffb96a19cc44b2861087b2acc3b786
-
SHA512
a3f27094393cda06e5ba05fface5f582c4492c664dcc751a39c2e69a8675a7083f7f971e3707fcca139110469a0e662d0ab213afc825f4dec37b78427fdb5a10
-
SSDEEP
12288:vAoDQwlaoMjqKAbpUM5SLKXiL/TU9ueiy56/u6NhgHx+665str+Qh+pXJPkz:45aMgb5KTUubuogU5sYQ6Z8z
Score7/10-
Reads WinSCP keys stored on the system
Tries to access WinSCP stored sessions.
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-