General
-
Target
JaffaCakes118_630b6174d80e21dff1d7e2c801b05650
-
Size
602KB
-
Sample
250102-gk1csayqbq
-
MD5
630b6174d80e21dff1d7e2c801b05650
-
SHA1
cd700fa1e81486b82623b2cbb14c53bbdd7fe79b
-
SHA256
6362ba2e4d039d0b00f3768c2206e6a1f62880362a7da9738c2c64ca57440850
-
SHA512
3d7e913d2fe8d699cca4c90250b95ed844517f3cbba2846ec49fd7e4f170984fa1d272762c70acc5eacd9b7205a869608047ab98e32690f6e7843ae2667d43c0
-
SSDEEP
12288:d7lw1Dx2plwfX9F59l3N8aF7ysgfBnnl2n:d7m1DSuFDl3maF7ysgpnncn
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_630b6174d80e21dff1d7e2c801b05650.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_630b6174d80e21dff1d7e2c801b05650.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_630b6174d80e21dff1d7e2c801b05650
-
Size
602KB
-
MD5
630b6174d80e21dff1d7e2c801b05650
-
SHA1
cd700fa1e81486b82623b2cbb14c53bbdd7fe79b
-
SHA256
6362ba2e4d039d0b00f3768c2206e6a1f62880362a7da9738c2c64ca57440850
-
SHA512
3d7e913d2fe8d699cca4c90250b95ed844517f3cbba2846ec49fd7e4f170984fa1d272762c70acc5eacd9b7205a869608047ab98e32690f6e7843ae2667d43c0
-
SSDEEP
12288:d7lw1Dx2plwfX9F59l3N8aF7ysgfBnnl2n:d7m1DSuFDl3maF7ysgpnncn
Score10/10-
Revengerat family
-
RevengeRat Executable
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-