General

  • Target

    4f1d0ad740d91f897e7a7b6942cd6ee2_JaffaCakes118

  • Size

    41KB

  • MD5

    4f1d0ad740d91f897e7a7b6942cd6ee2

  • SHA1

    50e849884fac59118501bc68963d0da83f7f4d40

  • SHA256

    a82284bf77bb12ac314acd15c2e5c50f3dac6c038dcd5d8710b588314ee14e0e

  • SHA512

    920965020b0efc13d3a040863513f8b96b0d46cb32b228b7f73e3505967f3953aac07c806d789285e25df78634bd70441f93a9b4fa1f1b56046cbd94ad9bb52f

  • SSDEEP

    768:jV0mwyu/yMgLbTUjgsrcijSMN9jThqphdhJPn5R:imwy+ksrXSqUphHJRR

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

AG-2

C2

http://167.88.15.115

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f1d0ad740d91f897e7a7b6942cd6ee2_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections