Overview

overview

10

Static

static

10

JaffaCakes...a6.exe

windows7-x64

10

JaffaCakes...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_eae42916198a75f682e3da5c2b43d988e6a5d2d96218c0b5281ac7e70ee199a6

  • Size

    3.6MB

  • MD5

    1c76a5dd0af3e1ec5e50418e1941875b

  • SHA1

    e627b3240a4a7a224361e09402fd4932aecf6448

  • SHA256

    eae42916198a75f682e3da5c2b43d988e6a5d2d96218c0b5281ac7e70ee199a6

  • SHA512

    30e258daaded4b36153c0083b8e07813af9b950e3e55d400fa5fb378bdf4cce1448544c54581d70f9ee0b4b63065d5e3ad17109bd38e192c1247917c3fbba707

  • SSDEEP

    49152:3XqWXogS8iueofOWVGp/vTIsXjsc++MapLmynk4kOTLWSguIvL:360Ns3ZqapLmak4T

Score
10/10
cryptbot

Malware Config

Extracted

Family

cryptbot

C2

veotmc23.top

morpib02.top
Attributes
  • payload_url

    http://tynoev02.top/download.php?file=lv.exe

Signatures

  • Cryptbot family
    cryptbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_eae42916198a75f682e3da5c2b43d988e6a5d2d96218c0b5281ac7e70ee199a6
    .exe windows:6 windows x86 arch:x86

    fe5e8263b6e7b06c2d997d485b7f959f


    Headers

    Imports

    Sections