Overview

overview

10

Static

static

10

956a768208...18.exe

windows7-x64

10

956a768208...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    956a768208ff48981465018d86d3c592_JaffaCakes118

  • Size

    15KB

  • MD5

    956a768208ff48981465018d86d3c592

  • SHA1

    a4ec75f3ae2ab4c5880faefcd3b7c78bb906aa2f

  • SHA256

    8d9f9bd5bfebfd5ca156a898cc21240d767aea11c8943d34760b05bdff586387

  • SHA512

    9f69e1eeed79687e14ca674ff2dc7d82e08648e6e726ad3779fc9f0d576ba4bb4eec05803f3fe377b5e71705178aa5c191430ff56239f60499ddda88eeb33656

  • SSDEEP

    192:IGVSJrJf+Bm72P4WOnefWRjyShQSPDSFa/rtKI89Wo7rFysFMIT:pYdh+BeSON2ShQSPDSUzth8957rFviI

Score
10/10
growtopia

Malware Config

Extracted

Family

growtopia

C2

https://discord.com/api/webhooks/874247640320204820/3B1X1K91RjBXiE1hDnhrKls4Ih9fE6Ge_n0uYQTa2cOY8SZ1MifX9KsVxzk4U4MVBNnJ

Attributes
  • payload_url

    https://cdn.discordapp.com/attachments/858108963778199552/872458910047559681/savedecoder.exe

Signatures

  • Growtopia family
    growtopia
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 956a768208ff48981465018d86d3c592_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections