General
-
Target
JaffaCakes118_a0a38a2d92e516306c9b0ff455ec5a70
-
Size
401KB
-
Sample
250105-ngxaaaspbw
-
MD5
a0a38a2d92e516306c9b0ff455ec5a70
-
SHA1
e9852c1f451a27edc74f399148869dc436fad878
-
SHA256
c6cced9b9ff8c73cf120a7422dda5cf760cfadffc40ad1cc0c957825843db10c
-
SHA512
dc9763b4db14465851484956bcc965c745b7eb6895d53acae12ba1b2263e5c4638f724dcac485353dd1d9c95a9e55162917612211db52f22ea7f4da3a091400f
-
SSDEEP
1536:5wG7MA34KtGjNnRm9aTpYlIgayfLyhmyORtjIPxplXCZInfLwbkSOW+69VoBwIsw:5k
Behavioral task
behavioral1
Sample
JaffaCakes118_a0a38a2d92e516306c9b0ff455ec5a70.ps1
Resource
win7-20240708-en
Malware Config
Extracted
asyncrat
0.5.7B
Hacked
toornavigator.sytes.net:5500
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_file
notepad.exe
-
install_folder
%AppData%
Targets
-
-
Target
JaffaCakes118_a0a38a2d92e516306c9b0ff455ec5a70
-
Size
401KB
-
MD5
a0a38a2d92e516306c9b0ff455ec5a70
-
SHA1
e9852c1f451a27edc74f399148869dc436fad878
-
SHA256
c6cced9b9ff8c73cf120a7422dda5cf760cfadffc40ad1cc0c957825843db10c
-
SHA512
dc9763b4db14465851484956bcc965c745b7eb6895d53acae12ba1b2263e5c4638f724dcac485353dd1d9c95a9e55162917612211db52f22ea7f4da3a091400f
-
SSDEEP
1536:5wG7MA34KtGjNnRm9aTpYlIgayfLyhmyORtjIPxplXCZInfLwbkSOW+69VoBwIsw:5k
-
Asyncrat family
-
Suspicious use of SetThreadContext
-