General

  • Target

    JaffaCakes118_f72d9af006ba6ab1dee2b6c974c26b76

  • Size

    34KB

  • MD5

    f72d9af006ba6ab1dee2b6c974c26b76

  • SHA1

    443fc047570a0ace98ae0f4c33b2a6f83ca73ea4

  • SHA256

    0e673eb418c87268aa3bcb262e8e03a3f719a95a8e118ba99515c57c9aa02d38

  • SHA512

    b1f37bdfa8bad65209135e31da1c8cede0cb3afa35e5abf5142b48e1b5087bf113a6946dfb6e9fd5fc889439b6f1e8cc8eb7ac185f018b7fea88857ec44c6806

  • SSDEEP

    768:9waHpz0JV+pvk8oT61eT+3UfVnY02+25dTjYA:9waJz5pvkX+GdnYB55tjYA

Score
10/10

Malware Config

Extracted

Family

jupyter

Version

OC-7

C2

http://149.255.35.179

Signatures

  • Jupyter Backdoor/Client payload 1 IoCs
  • Jupyter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f72d9af006ba6ab1dee2b6c974c26b76
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections