Overview

overview

10

Static

static

10

exepayload.dll

windows7-x64

1

exepayload.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_80e51f4bc1f0f754e3214204d93a2c6f3ac126e395102fd05550261741778a1f

  • Size

    16KB

  • MD5

    abc4707f302ee4e705ab63d30d6e7593

  • SHA1

    04f03b805b79d9652dde245f159ecd05fced9d19

  • SHA256

    80e51f4bc1f0f754e3214204d93a2c6f3ac126e395102fd05550261741778a1f

  • SHA512

    b2d9f853b56edc173ebb9d52026554d8b09b40bdc5c2a62da0321046b251f58b60e4294ca006a3c756afda6c7037afeaed1635fa8d61f94181165aaef2730455

  • SSDEEP

    384:OyjV+ICOpZlhyj76antpjxaZGk+BR6vSkb8KMDCw4y5Tp0auHnK567g:OK+ClGdsqr4Q5Tp0Ra

Score
10/10
jupyter

Malware Config

Extracted

Family

jupyter

Version

AG-5

C2

http://167.88.15.115

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
    jupyter
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_80e51f4bc1f0f754e3214204d93a2c6f3ac126e395102fd05550261741778a1f
    .zip

    Password: infected

  • exepayload.exe
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections