Overview

overview

10

Static

static

10

JaffaCakes...0e.exe

windows7-x64

10

JaffaCakes...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_68346666256e59cfa93d8a7eccd42ad036f42b2fec3836665515aa1ae5d6170e

  • Size

    3.6MB

  • MD5

    5582206c68e0712abac609eba6b33873

  • SHA1

    227a8a025f2d7d4e77f4145913bb8a214b14fcfe

  • SHA256

    68346666256e59cfa93d8a7eccd42ad036f42b2fec3836665515aa1ae5d6170e

  • SHA512

    4799128d3a69f0ce35462b5c69403158a7811f41e3bd9a0c9dd3fb97a6c4df190f8ae0e3f72ebccb30e12dc29b264cab310ace1ea0ddaebd86d7b24beb8ebb85

  • SSDEEP

    49152:jpLy2YCqByztofOOZBGj/SVAE+hZiqSDYvOGUyUMv8y7aT4Frqgf8IK:jlh8rC4mOGUyl8yLqgf

Score
10/10
cryptbot

Malware Config

Extracted

Family

cryptbot

C2

cemzau77.top

morvuy07.top
Attributes
  • payload_url

    http://bojpyv10.top/download.php?file=lv.exe

Signatures

  • Cryptbot family
    cryptbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_68346666256e59cfa93d8a7eccd42ad036f42b2fec3836665515aa1ae5d6170e
    .exe windows:6 windows x86 arch:x86

    fe5e8263b6e7b06c2d997d485b7f959f


    Headers

    Imports

    Sections