General
- Target ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118
- Size 1.8MB
- Sample241219-mstsvs1pcp
- SHA256 9da1f4a50f3c9c049ef10195e02c36b7e5295beb279b40d973cba1fd1cf88aa1
- MD5 ff8cd6fb05c167f48499a1e491a1e654
- SHA1 adc4a6850237a7df916a52b11c9f4d5dcd52df4b
- SHA512 91af3ad28ed76e2ff429d100d4027afb5819ee03374e82253497231b8da03ab579be76c8737c9d9afb10f8dcee733d7c666cc1a510abdafd70fa7952c9b91fa4
- SSDEEP 24576:bUHorNKHGJTFNWTWXinoxUsNmvb7OWCtxl0SrgnLyFi+/+ZIGuvVTuSeU8rbh5sf:bY3HeXW3no1mz7Ov6N/+/+Sl72hv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118.exe
Resource
win7-20240903-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
sendsafe
Botnet
-
UNREGISTERED
C2
-
31.44.184.51:50019
-
31.44.184.51:50020
Attributes
-
service_name
Enterprise Mailing Service
Targets
-
- Target ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118
- Size 1.8MB
- SHA256 9da1f4a50f3c9c049ef10195e02c36b7e5295beb279b40d973cba1fd1cf88aa1
- MD5 ff8cd6fb05c167f48499a1e491a1e654
- SHA1 adc4a6850237a7df916a52b11c9f4d5dcd52df4b
- SHA512 91af3ad28ed76e2ff429d100d4027afb5819ee03374e82253497231b8da03ab579be76c8737c9d9afb10f8dcee733d7c666cc1a510abdafd70fa7952c9b91fa4
- SSDEEP 24576:bUHorNKHGJTFNWTWXinoxUsNmvb7OWCtxl0SrgnLyFi+/+ZIGuvVTuSeU8rbh5sf:bY3HeXW3no1mz7Ov6N/+/+Sl72hv
- MD5 SHA1 SHA512 SSDEEP
Score10/10Sendsafe family
SendSafe payload