General
- Target JaffaCakes118_3e22a20134c9fb6ec60fb7b78abc4cd4
- Size 2.0MB
- Sample251227-ynfafsxngp
- SHA256 939a030a475478e0ed1b5b8fda7a8bb1cf9faf76e2453122af23d934d92618f9
- MD5 3e22a20134c9fb6ec60fb7b78abc4cd4
- SHA1 fa84541d0c8bb2e730d0d4b24dcd6ab7cbbcef7c
- SHA512 94056abb3aa922ac34d5a9b75b4ee24b52ca675c8c5580256c29260797a7caf78a933efdca6091778cc5c5a17267df8583271da8ad41413fb2f23b9212c166c1
- SSDEEP 49152:aA5Dr9WJvgL+qPjvZFUuwEJ2cLyf2ubxPZ+irT:H5DrMbqPjHUTkL4zCi3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JaffaCakes118_3e22a20134c9fb6ec60fb7b78abc4cd4.exe
Resource
win10v2004-20251223-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
JaffaCakes118_3e22a20134c9fb6ec60fb7b78abc4cd4.exe
Resource
win11-20251223-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
sendsafe
Botnet
-
UNREGISTERED
C2
-
91.220.131.191:50001
-
91.220.131.191:50002
Attributes
-
service_name
Enterprise Mailing Service
Targets
-
- Target JaffaCakes118_3e22a20134c9fb6ec60fb7b78abc4cd4
- Size 2.0MB
- SHA256 939a030a475478e0ed1b5b8fda7a8bb1cf9faf76e2453122af23d934d92618f9
- MD5 3e22a20134c9fb6ec60fb7b78abc4cd4
- SHA1 fa84541d0c8bb2e730d0d4b24dcd6ab7cbbcef7c
- SHA512 94056abb3aa922ac34d5a9b75b4ee24b52ca675c8c5580256c29260797a7caf78a933efdca6091778cc5c5a17267df8583271da8ad41413fb2f23b9212c166c1
- SSDEEP 49152:aA5Dr9WJvgL+qPjvZFUuwEJ2cLyf2ubxPZ+irT:H5DrMbqPjHUTkL4zCi3
- MD5 SHA1 SHA512 SSDEEP
Score10/10Sendsafe family
SendSafe payload