Overview

overview

10

Static

static

10

JaffaCakes...ff.exe

windows7-x64

10

JaffaCakes...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_aaf6fc42f45d8b08080162b90c08c90b9433efb9523a09ec66d6e44c7a5d90ff

  • Size

    3.1MB

  • MD5

    35423e02693b996535af85563a0702d4

  • SHA1

    7242124eed9ecd5177eed352147ed6b696b371ca

  • SHA256

    aaf6fc42f45d8b08080162b90c08c90b9433efb9523a09ec66d6e44c7a5d90ff

  • SHA512

    731d38cbed6dd9de03908a37ed957876c0e08861b68e4571ba887a451a8011126b272fe838c0df0acab4a76a2278188d02376fd077c3ea5235ffa02b4e38a9f7

  • SSDEEP

    49152:yjOebmxqhGT/ll1EUg4nt1Iri80Pvh2TJhlTOTczI:yKo+FjIG80PATOI

Score
10/10
cryptbot

Malware Config

Extracted

Family

cryptbot

C2

cemnli65.top

morota06.top
Attributes
  • payload_url

    http://bojitn09.top/download.php?file=lv.exe

Signatures

  • Cryptbot family
    cryptbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_aaf6fc42f45d8b08080162b90c08c90b9433efb9523a09ec66d6e44c7a5d90ff
    .exe windows:6 windows x86 arch:x86

    90e655304ecb8b78cea5348165d52a0d


    Headers

    Imports

    Sections