General

  • Target

    JaffaCakes118_b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

  • Size

    275KB

  • MD5

    cc2eb1c47b888609af9f408aa765c09a

  • SHA1

    7c548ca820cd1b992ec7f879fa83ff4678b047be

  • SHA256

    b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc

  • SHA512

    0808b78730915e298975512b07d5a71cabe0cc3275d24835e2729e31dc98bbecf335e29758f31bd03050ab4032adca7f60b0de14253d7eb10615f6e0dc9d38c0

  • SSDEEP

    6144:EMbC0SbzJjbSLPWstc7e72gk6ZVxw4ufGxs4lDWyWZsPGhOikTuid8umn6Bg:EG/CzJxgk4w4ufGJlDFWZsbikTuidB+j

Score
10/10

Malware Config

Extracted

Family

cryptbot

C2

cemahq15.top

moresh01.top

Attributes
  • payload_url

    http://bojwfi01.top/download.php?file=lv.exe

Signatures

  • Cryptbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_b7cda70cbb94b6118791ca56c8f3f6554fd5defbb194bd8bd963654c9164d9fc
    .exe windows:6 windows x86 arch:x86

    7e5e2f20b4ba05f10dfbbafb0fc9054a


    Headers

    Imports

    Sections