Overview

overview

10

Static

static

3

JaffaCakes...18.exe

windows7-x64

10

JaffaCakes...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_77c728151d3063d3278f4eb763275618

  • Size

    534KB

  • Sample

    250107-zar8jayrgr

  • MD5

    77c728151d3063d3278f4eb763275618

  • SHA1

    ae067984fd809662bb1dfe40326e617bb3889bc0

  • SHA256

    0f46cfd986c637d5494dda5c62a5392a31c9265a4022eff41f9b4b944ab3473e

  • SHA512

    1ed6b7a7dd4db1bcab8e6f923bdeff507b4ae3dc0eae0b5fd27e46957cc2db32b44166c03ba87cd1221551ff52e4481a6b44e3932ee14d39e78b8df7dad9e289

  • SSDEEP

    3072:FeLXZcICvc8rd8+597ofMVHVnudrNw4X5Vqn7VfiP2GLK/vMz8DNuC89NAa+zwJ4:F8GeWnvI8D47+1+1m5acfh5+CJK+

Score
10/10
bazaloaderwarzoneratinfostealerrattrojan

Malware Config

Targets

    • Target

      JaffaCakes118_77c728151d3063d3278f4eb763275618

    • Size

      534KB

    • MD5

      77c728151d3063d3278f4eb763275618

    • SHA1

      ae067984fd809662bb1dfe40326e617bb3889bc0

    • SHA256

      0f46cfd986c637d5494dda5c62a5392a31c9265a4022eff41f9b4b944ab3473e

    • SHA512

      1ed6b7a7dd4db1bcab8e6f923bdeff507b4ae3dc0eae0b5fd27e46957cc2db32b44166c03ba87cd1221551ff52e4481a6b44e3932ee14d39e78b8df7dad9e289

    • SSDEEP

      3072:FeLXZcICvc8rd8+597ofMVHVnudrNw4X5Vqn7VfiP2GLK/vMz8DNuC89NAa+zwJ4:F8GeWnvI8D47+1+1m5acfh5+CJK+

    Score
    10/10
    bazaloaderwarzoneratinfostealerrattrojan

    • Bazaloader family

      bazaloader

    • Detects BazaLoader malware

      BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.

      trojan

    • WarzoneRat, AveMaria

      WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

      ratinfostealerwarzonerat

    • Warzonerat family

      warzonerat

    • Warzone RAT payload

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks