General
-
Target
JaffaCakes118_a494969c93a55a04d5bd0f5ea1ad326f
-
Size
100KB
-
Sample
250108-rtd61swkfj
-
MD5
a494969c93a55a04d5bd0f5ea1ad326f
-
SHA1
e9cff573b11f6dc76c92a6c45fdca43c705a5f14
-
SHA256
362fed03ae922e05914e4b2d42ae0f99c27601f6cc3ce3c9a9bdcdcc8a06aee0
-
SHA512
70348d6555095145e73e6d21787a140ffd7ca3c2224d0db48c25e4ef6cccce872797d67113cdf675f6f9cb01b5be6234f2edf8aea92735094ef3e55213926068
-
SSDEEP
1536:5pAhHaIPYHSgUhsoXd/Oev9rmRrR72gXjgU1vE3gECmxG:w3G
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_a494969c93a55a04d5bd0f5ea1ad326f.ps1
Resource
win7-20240903-en
Malware Config
Extracted
asyncrat
0.5.7B
kunn
mor3ebfashe5elt5ens.ooguy.com:5001
Ayrtmaan_X9080
-
delay
3
-
install
false
-
install_folder
%AppData%
Targets
-
-
Target
JaffaCakes118_a494969c93a55a04d5bd0f5ea1ad326f
-
Size
100KB
-
MD5
a494969c93a55a04d5bd0f5ea1ad326f
-
SHA1
e9cff573b11f6dc76c92a6c45fdca43c705a5f14
-
SHA256
362fed03ae922e05914e4b2d42ae0f99c27601f6cc3ce3c9a9bdcdcc8a06aee0
-
SHA512
70348d6555095145e73e6d21787a140ffd7ca3c2224d0db48c25e4ef6cccce872797d67113cdf675f6f9cb01b5be6234f2edf8aea92735094ef3e55213926068
-
SSDEEP
1536:5pAhHaIPYHSgUhsoXd/Oev9rmRrR72gXjgU1vE3gECmxG:w3G
-
Asyncrat family
-
Suspicious use of SetThreadContext
-