General

  • Target

    c59cab5bc3f9476438ab62f497a7390b_JaffaCakes118

  • Size

    71KB

  • MD5

    c59cab5bc3f9476438ab62f497a7390b

  • SHA1

    23257e53a2c20bfae331d751acf037a9d8e68b17

  • SHA256

    5f6453e2160da33bd55bfde4ce17f4dabe9c4835dd844ce5a4e8d261d349f5dc

  • SHA512

    14e1f4914bc1efcf521a1974f73fe56cc40255620e63603229995eda4ad44a7edcb5d23b11e3de6d7bab2160a604db549f108e630509b7fd947b20f338311d5e

  • SSDEEP

    1536:EBkzaKHIRB+o/BFS+7o8YYwGiVS0AUips6D/Swp1IWfresW5QWzJ/13EcM:EBCvIf7FwGiVS0AUips6D/Swp1IWfrey

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

IN-10

C2

http://46.102.152.102

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c59cab5bc3f9476438ab62f497a7390b_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections